Zhenfeng13 My-Bbs vulnerabilities

CVE-2025-3807 [CRITICAL] CWE-284 CVE-2025-3807: A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0. This affects A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0. This affects the function Upload of the file src/main/java/com/my/bbs/controller/common/UploadController.java of the component Endpoint. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to

CVE-2025-3808 [MEDIUM] CWE-352 CVE-2025-3808: A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerab A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Multiple endpoints might be affected.