Hyphp

hyphp

4 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-24677 1Hyphp 1Hybbs2 Jun 17, 2026 Feb 9, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.
CVE-2022-24676 1Hyphp 1Hybbs2 Jun 17, 2026 Feb 9, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.
CVE-2019-10644 1Hyphp 1Hybbs Jun 17, 2026 Mar 30, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account.
CVE-2018-14499 1Hyphp 1Hybbs Nov 21, 2024 Mar 7, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html.