hyyyp/HYBBS2

hyyyp/HYBBS2

GitHubGitHub
GitHubgithub.com
bbs.hyphp.cnbbs.hyphp.cn
Releases10
Frequency3 weeks 5 days
Last Release
Stars113
基于HYPHP MVC框架开发的PHP论坛程序，拥有插件、模板扩展。
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-24676↗
8.8 HIGH6.5 MEDIUM

update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.

CVE-2022-24677↗
9.8 CRITICAL7.5 HIGH

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.

CVE-2019-10644↗
—6.8 MEDIUM

An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account.