CVE-2019-10644

An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account...

CVE-2019-10644

An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account...

Cross site request forgery (csrf)

An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account...

CVE-2019-10644

HYBBS 2.2 has a CSRF vulnerability on the /?admin/user.html page that can add an administrator account. The connected sources confirm the affected software/version and the vulnerable endpoint; no exploit details or fixes are provided in the documents. No root-cause or remediation specifics are st...

CVE-2019-10644

An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account...

Design/Logic Flaw

An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html...

CVE-2018-14499

An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html...

CVE-2018-14499

An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html...

CVE-2018-14499

HYBBS (through 2016-03-08) contains an XSS vulnerability that can be triggered via the article title when posting to post.html. The description in multiple sources confirms this flaw but does not provide affected versions beyond the date window or remediation guidance.

CVE-2018-14499

An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html...

Command Execution Vulnerability in HYBBS Frontend

HYBBS is a MVC-structured program based on HYPHP framework. A command execution vulnerability exists in the frontend of HYBBS, which can be exploited by attackers to gain control of the web server...

Arbitrary Folder Deletion Vulnerability in HYBBS Community Forum System Version 2.1.3

HYBBS is a MVC-structured program based on HYPHP framework. HYBBS Community Forum System version 2.1.3 has an arbitrary folder deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary folders, resulting in a system crash...

Stored Cross-Site Scripting Vulnerability in HYBBS v2.0

HYBBS is a MVC-structured program based on HYPHP framework. A stored cross-site scripting vulnerability exists in HYBBS v2.0. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in user hijacking...

XSS Vulnerability in HYBBS 1.5.34 CMS

HYBBS is based on HYPHP framework, the framework is a MVC structure program. XSS vulnerability exists in HYBBS 1.5.34 CMS. An attacker can use this vulnerability to implant cross-site code, obtain sensitive information such as user cookies, close cross-site pop-up boxes, and also obtain page path...