Pybbs Project

Pybbs

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.3

CVE-2025-8549

Exploit
  • EPSS 0.07%
  • Veröffentlicht 05.08.2025 06:32:06
  • Zuletzt bearbeitet 03.09.2025 13:10:57

A vulnerability was found in atjiu pybbs up to 6.0.0. It has been classified as critical. Affected is the function update of the file src/main/java/co/yiiu/pybbs/controller/admin/UserAdminController.java. The manipulation leads to weak password requi...

6.3

CVE-2025-8548

Exploit
  • EPSS 0.07%
  • Veröffentlicht 05.08.2025 06:02:06
  • Zuletzt bearbeitet 03.09.2025 13:28:37

A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function sendEmailCode of the file src/main/java/co/yiiu/pybbs/controller/api/SettingsApiController.java of the component Registered Email Hand...

5.3

CVE-2025-8547

Exploit
  • EPSS 0.09%
  • Veröffentlicht 05.08.2025 05:32:06
  • Zuletzt bearbeitet 03.09.2025 13:42:55

A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as critical. This vulnerability affects unknown code of the component Email Verification Handler. The manipulation leads to improper authorization. The attack can be initiated r...

5.3

CVE-2025-8546

Exploit
  • EPSS 0.07%
  • Veröffentlicht 05.08.2025 05:15:38
  • Zuletzt bearbeitet 03.09.2025 14:00:54

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects the function adminlogin/login of the component Verification Code Handler. The manipulation leads to guessable captcha. It is possible to initiate...

6.1

CVE-2022-23391

Exploit
  • EPSS 0.22%
  • Veröffentlicht 14.02.2022 21:15:09
  • Zuletzt bearbeitet 21.11.2024 06:48:30

A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box.

7.5

CVE-2020-28702

Exploit
  • EPSS 0.25%
  • Veröffentlicht 01.11.2021 14:15:07
  • Zuletzt bearbeitet 21.11.2024 05:23:08

A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information.