Bbs
Monthly
A weakness has been identified in diyhi bbs up to 6.8. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Server-side request forgery in diyhi bbs up to version 6.8 allows remote authenticated attackers with low privileges to manipulate the Host header via the /admin/login endpoint, enabling limited unauthorized access to internal resources. A public proof-of-concept exploit is available, but no active exploitation has been confirmed; EPSS score indicates a low probability of exploitation (0.08%).
Path traversal vulnerability in diyhi bbs 6.8 allows remote authenticated attackers to read or write arbitrary files via the dirName parameter in the ForumManageAction API. Public exploit code is available, but no active exploitation has been reported.
A weakness has been identified in diyhi bbs up to 6.8. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Server-side request forgery in diyhi bbs up to version 6.8 allows remote authenticated attackers with low privileges to manipulate the Host header via the /admin/login endpoint, enabling limited unauthorized access to internal resources. A public proof-of-concept exploit is available, but no active exploitation has been confirmed; EPSS score indicates a low probability of exploitation (0.08%).
Path traversal vulnerability in diyhi bbs 6.8 allows remote authenticated attackers to read or write arbitrary files via the dirName parameter in the ForumManageAction API. Public exploit code is available, but no active exploitation has been reported.