CVE search

404.268 vulnerabilities · 1.768 actively exploited (CISA KEV)

4 results

ID	Severity	Summary	Published
CVE-2021-26636	KRITISCH9.6	Stored XSS and SQL injection vulnerability in MaxBoard could lead to occur Remote Code Execution, which could lead to information exposure and privilege escalation.	23/06/2022
CVE-2021-26634	KRITISCH9.8	SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use these vulnerabilities to perform attacks such as stealing server manage	02/06/2022
CVE-2021-26633	KRITISCH9.8	SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file.