Description (CNA)
SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Max Yi / MaxBoard | affected unspecified through 1.9.3.3 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.