CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Page 1

update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.

An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account.

An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html.

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2022-24676	update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.	HIGH	8.8	1.49%	Feb 8, 2022
CVE-2022-24677	Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.	CRITICAL	9.8	2.49%	Feb 8, 2022
CVE-2019-10644	An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account.	HIGH	8.8	0.66%	Mar 30, 2019
CVE-2018-14499	An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html.	MEDIUM	6.1	0.79%	Mar 7, 2019

Rows per page

Showing 1 to 4 CVEs · page 1