← Database

CVE-2022-24676

HIGH CVSS: 8.8 Published: 2022-02-09 Modified: 2026-06-17

Description

update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.

Affected Platforms

Hyphp Hybbs2

Weakness Type

CWE-434

References