https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9461.htmlhttps://patchthecve.com/cve/CVE-2025-9461.htmlWed, 17 Jun 2026 10:09:02 +0000MEDIUM 4.3: A weakness has been identified in diyhi bbs up to 6.8. The impacted element is an unknown function of the file src/main/java/cms/web/action/filePackage/FilePackageManageAction.java of the component File Compression Handler. This manipulation of the argument idGroup causes information disclosure. Remhttps://patchthecve.com/cve/CVE-2025-6762.htmlhttps://patchthecve.com/cve/CVE-2025-6762.htmlWed, 17 Jun 2026 10:02:31 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in diyhi bbs up to 6.8. This affects the function getUrl of the file /admin/login of the component HTTP Header Handler. The manipulation of the argument Host leads to server-side request forgery. It is possible to initiate the attack remotely. Thhttps://patchthecve.com/cve/CVE-2025-6453.htmlhttps://patchthecve.com/cve/CVE-2025-6453.htmlWed, 17 Jun 2026 10:01:55 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/main/java/cms/web/action/template/ForumManageAction.java of the component API. The manipulation of the argument dirName leads to path traversal. It is possible to launch the attack r