GCVE - cpe:2.3:a:diyhi:bbs:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:diyhi:bbs:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Diyhi (`36ea9dc4-911e-5cf9-ab9c-8fe9e72deb5d`)
Product	Bbs (`ed5c9b1a-4932-5028-8372-fed0d1fd100b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/diyhi/bbs`	purl2cpe	2026-06-01 10:11:46.370234

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9461`	vulnerable	2026-06-08 07:45:22.537993	diyhi bbs File Compression FilePackageManageAction.java information disclosure MEDIUM (4.3) A weakness has been identified in diyhi bbs up to 6.8. The impacted element is an unknown function of the file src/main/java/cms/web/action/filePackage/FilePackageManageAction.java of the component File Compression Handler. This manipulation of the argument idGroup causes information disclosure. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Published: 2025-08-26T03:02:08.509Z Updated: 2025-08-26T13:39:47.790Z Open on db.gcve.eu Reference links https://vuldb.com/?id.321296 https://vuldb.com/?ctiid.321296 https://vuldb.com/?submit.634295 https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6762`	vulnerable	2026-06-08 07:43:16.211048	diyhi bbs HTTP Header login getUrl server-side request forgery MEDIUM (6.3) A vulnerability classified as critical has been found in diyhi bbs up to 6.8. This affects the function getUrl of the file /admin/login of the component HTTP Header Handler. The manipulation of the argument Host leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-27T11:31:05.144Z Updated: 2025-06-27T13:17:32.610Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314073 https://vuldb.com/?ctiid.314073 https://vuldb.com/?submit.598896 https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-02.md https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-02.md#steps-to-reproduce	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6453`	vulnerable	2026-06-08 07:43:15.088893	diyhi bbs API ForumManageAction.java add path traversal MEDIUM (6.3) A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/main/java/cms/web/action/template/ForumManageAction.java of the component API. The manipulation of the argument dirName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-22T02:31:05.226Z Updated: 2025-06-23T14:51:03.172Z Open on db.gcve.eu Reference links https://vuldb.com/?id.313560 https://vuldb.com/?ctiid.313560 https://vuldb.com/?submit.598862 https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-01.md https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-01.md#steps-to-reproduce	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.