update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.
8.8CVSS
8.5AI Score
0.001EPSS
Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.
9.8CVSS
9.5AI Score
0.008EPSS