Diyhi Bbs
10 CVEs affecting Diyhi Bbs. Latest disclosed: 2025-08-26. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43103 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. |
CVE-2021-43102 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. |
CVE-2021-43101 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a remote malicious user execute arbitrar… |
CVE-2021-43100 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. |
CVE-2021-43098 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function. |
CVE-2021-43097 | High | 7.2 | 2022-03-28 | A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute arbitrary code. |
CVE-2025-6762 | Medium | 6.3 | 2025-06-27 | A vulnerability classified as critical has been found in diyhi bbs up to 6.8. This affects the function getUrl of the file /admin/login of the component HTTP H… |
CVE-2025-6453 | Medium | 6.3 | 2025-06-22 | A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/main/java/cms/web/action/template/ForumMa… |
CVE-2021-43099 | Medium | 4.9 | 2022-03-28 | An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.java, which unzips the arbitrary uplade… |
CVE-2025-9461 | Medium | 4.3 | 2025-08-26 | A weakness has been identified in diyhi bbs up to 6.8. The impacted element is an unknown function of the file src/main/java/cms/web/action/filePackage/FilePac… |