CVE-2021-26636

概要

参考情報

• krcert.or.kr/krcert/secNoticeView.do · Third Party Advisory

maxboard のその他の脆弱性

• CVE-2021-26634緊急 9.8SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files …
• CVE-2021-26633緊急 9.8SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulner…
• CVE-2021-26628中 6.1Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file…