Diyhi

11 CVEs across 2 Diyhi products. Browse Diyhi vulnerabilities, severities, and proof-of-concept exploits.

Diyhi products with known CVEs

ProductCVEs
Bbs10
Bbs Forum1
Diyhi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-9461Medium4.32025-08-26A weakness has been identified in diyhi bbs up to 6.8. The impacted element is an unknown function of the file src/main/java/cms/web/action/filePackage/FilePac…
CVE-2025-6762Medium6.32025-06-27A vulnerability classified as critical has been found in diyhi bbs up to 6.8. This affects the function getUrl of the file /admin/login of the component HTTP H…
CVE-2025-6453Medium6.32025-06-22A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/main/java/cms/web/action/template/ForumMa…
CVE-2021-43103High7.22022-03-28A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
CVE-2021-43102High7.22022-03-28A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
CVE-2021-43101High7.22022-03-28A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a remote malicious user execute arbitrar…
CVE-2021-43100High7.22022-03-28A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
CVE-2021-43099Medium4.92022-03-28An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.java, which unzips the arbitrary uplade…
CVE-2021-43098High7.22022-03-28A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function.
CVE-2021-43097High7.22022-03-28A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute arbitrary code.
CVE-2022-23390Critical9.82022-02-14An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files.