CVE-2022-24677

CRITICAL CVSS: 9.8 Published: 2022-02-09 Modified: 2026-06-17

Description

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.

Affected Platforms

Hyphp Hybbs2

Weakness Type

NVD-CWE-noinfo

References