CVE-2022-24676

update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.

Date published : 2022-02-08

https://github.com/hyyyp/HYBBS2/issues/33