Lucene search
+L

27 matches found

CVE
CVE
•added 2022/06/01 2:59 p.m.•83 views

CVE-2021-26634

Maxboard/MaxBoard (Max Yi Korea) has input validation flaws in certain parameters/variables of files, allowing SQL injection and file upload attacks. This can lead to arbitrary code execution or privilege escalation, including web-shell-based server management compromise. Some sources indicate af...

9.8CVSS10AI score0.01322EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/06/01 2:54 p.m.•75 views

CVE-2021-26633

CVE-2021-26633 affects MaxBoard, a CMS/web framework. The connected sources describe a two-pronged vulnerability: SQL Injection and Local File Inclusion (LFI) in MaxBoard that can cause information leakage and privilege escalation. The root cause is manipulation of input variables to insert arbit...

9.8CVSS9.2AI score0.00905EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/06/01 2:54 p.m.•24 views

CVE-2021-26633 Maxboard SQL injection and LFI vulnerability

SQL injection and Local File Inclusion LFI vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file...

7.5CVSS10AI score0.00905EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/01 12:00 a.m.•7 views

CVE-2021-26633: Improper Neutralization of Special Elements used in an SQL Command

SQL injection and Local File Inclusion LFI vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file...

9.8CVSS8.3AI score0.00905EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/06/01 12:00 a.m.•14 views

PT-2022-9782 · Maxboard · Maxboard

Name of the Vulnerable Software and Affected Versions: Maxboard affected versions not specified Description: The issue allows for SQL injection and file upload attacks due to insufficient validation of input values in some parameters and variables of files, which may lead to arbitrary code...

9.8CVSS10AI score0.01322EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/01 12:00 a.m.•5 views

CVE-2021-26634: Improper Neutralization of Special Elements used in an SQL Command

SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use these vulnerabilities to perform attacks such as...

9.8CVSS8.7AI score0.01322EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/04/26 12:00 a.m.•12 views

MaxBoard 跨站脚本漏洞

Max Yi MaxBoard is a CMS Content Management System or Web framework from Max Yi Korea. It helps to make website creation and site management easier, and can be easily and conveniently used to build the back-end of an application. A cross-site scripting vulnerability exists in MaxBoard versions...

8.1CVSS6AI score0.00786EPSS
SaveExploits0References2
Rows per page
Query Builder