Approved changes feed: RSS · Atom

cpe:2.3:a:diyhi:bbs:6.8:*:*:*:*:*:*:*

part: a version: 6.8 update: *

VendorDiyhi (36ea9dc4-911e-5cf9-ab9c-8fe9e72deb5d)
ProductBbs (ed5c9b1a-4932-5028-8372-fed0d1fd100b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/diyhi/bbs purl2cpe 2026-09-15 20:24:54.619737

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6453 vulnerable 2026-06-08 07:43:15.090221 diyhi bbs API ForumManageAction.java add path traversal
MEDIUM (6.3)
A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/main/java/cms/web/action/template/ForumManageAction.java of the component API. The manipulation of the argument dirName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T02:31:05.226Z
Updated: 2025-06-23T14:51:03.172Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.