CVE-2022-24677

Published February 9th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.

基于HYPHP MVC框架开发的PHP论坛程序，拥有插件、模板扩展。

GitHub

113