high8.8
CVE-2022-24676
update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.
Impact
update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hyphp | Hybbs2 | before 2.3.3 |