Hyphp Hybbs2
2 CVEs affecting Hyphp Hybbs2. Latest disclosed: 2022-02-09. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24677 | Critical | 9.8 | 2022-02-09 | Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php. |
CVE-2022-24676 | High | 8.8 | 2022-02-09 | update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive. |