update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.

Published Feb 8, 2022 · Updated Aug 3, 2024 · Assigned by mitre