critical9.8
CVE-2022-24677
Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.
Impact
Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hyphp | Hybbs2 | before 2.3.3 |