CVE-2021-43098

A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function...

Unrestricted file upload

A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...

Sql injection

A Server-side Template Injection SSTI vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute arbitrary code...

Unrestricted file upload

A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...

Unrestricted file upload

A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...

CVE-2021-43103

A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...

CVE-2021-43103

The CVE-2021-43103 entry concerns a File Upload vulnerability in the BBS 5.3 web forum software. The connected sources specify that the flaw exists in ForumManageAction.java in the GetType function, allowing a remote attacker to execute arbitrary code. Affected component: BBS 5.3; vulnerability t...

CVE-2021-43102

A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...

CVE-2021-43101

A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...

CVE-2021-43101

CVE-2021-43101 corresponds to a file upload vulnerability in bbs 5.3, exploitable via MembershipCardManageAction.java in GetType, enabling remote code execution. The connected sources corroborate a web forum software flaw permitting arbitrary code execution through unvalidated uploads. Affected c...

CVE-2021-43100

CVE-2021-43100 affects bbs 5.3, where a File Upload vulnerability exists in TopicManageAction.java (GetType function). This allows a remote attacker to execute arbitrary code due to improper handling of uploaded content. The vulnerability is documented across multiple sources (NVD entry and corro...

CVE-2021-43100

A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...

CVE-2021-43099

CVE-2021-43099 is a Zip Slip-style vulnerability in the bbs 5.3 UpgradeNow function (UpgradeManageAction.java) that unzips uploaded archives without validating filenames, enabling directory traversal (e.g., ../../evil.exe). The CVE description and connected sources confirm the affected component ...

CVE-2021-43098

CVE-2021-43098 describes a file upload vulnerability in the open-source forum software bbs v5.3 , originating from the QuestionManageAction.java file, within its getType function. The connected documents confirm the affected product and the exact location in code but do not provide concrete explo...

CVE-2021-43098

A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function...

CVE-2021-43097

A Server-side Template Injection SSTI vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute arbitrary code...

CVE-2021-43097

The provided connected documents indicate CVE-2021-43097 affects the bbs 5.3 web application, specifically a Server-side Template Injection (SSTI) in TemplateManageAction.java that could allow a malicious user to execute arbitrary code. This establishes the component/file and the underlying vulne...

diyhi bbs 代码问题漏洞

diyhi bbs patrol cloud light forum system is a Chinese open source project , using JAVA + MYSQL architecture , adaptive mobile and computer , simple interface , high performance . A security vulnerability exists in diyhi bbs version 5.3, which originates from a file upload vulnerability in the...

diyhi bbs 路径遍历漏洞

diyhi bbs patrol cloud light forum system is a Chinese open source project , using JAVA + MYSQL architecture , adaptive mobile and computer , simple interface , high performance . diyhi bbs 5.3 version of a security vulnerability , the vulnerability stems from the UpgradeManageAction.java file...

diyhi bbs 代码注入漏洞

diyhi bbs patrol cloud light forum system is a Chinese open source project , using JAVA + MYSQL architecture , adaptive mobile and computer , simple interface , high performance . diyhi bbs 5.3 version of the code injection vulnerability , the vulnerability stems from TemplateManageAction.javawhi...