Skip to content
OpenAdvisories

Vendor

diyhi

3 known vulnerabilities.

Products

bbs 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-9461

    diyhi bbs File Compression FilePackageManageAction.java information disclosure

    A weakness has been identified in diyhi bbs up to 6.8. The impacted element is an unknown function of the file src/main/java/cms/web/action/filePackage/FilePackageManageAction.java of the component File Compression Handler. This manipulation of the argument i…

    diyhi bbs
  • Medium 6.3
    CVE-2025-6762

    diyhi bbs HTTP Header login getUrl server-side request forgery

    A vulnerability classified as critical has been found in diyhi bbs up to 6.8. This affects the function getUrl of the file /admin/login of the component HTTP Header Handler. The manipulation of the argument Host leads to server-side request forgery. It is pos…

    diyhi bbs
  • Medium 6.3
    CVE-2025-6453

    diyhi bbs API ForumManageAction.java add path traversal

    A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/main/java/cms/web/action/template/ForumManageAction.java of the component API. The manipulation of the argument dirName leads to path travers…

    diyhi bbs