Max Yi MaxBoard SQL Injection Vulnerability

Max Yi MaxBoard is a CMS (Content Management System) or web framework from Max Yi, Korea. It helps to make website creation and site management easier and can be easily and conveniently used to build the backend of applications.A SQL injection vulnerability exists in versions prior to Max Yi MaxBoard 1.9.3.3. The vulnerability stems from the ability to manipulate variables and insert arbitrary files by using the required values, which can be exploited by attackers to cause information leakage and elevation of privileges.