Read the docs

Maxb

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Maxb records in CISA KEV

No Maxb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Maxboard 4 records MEDIUM

Records

4 records in Maxboard · all components

TI-2021-08351 CVE-2021-26634 · GHSA-f35m-48c3-v5mq

Maxboard multiple vulnerabilities

Priority MEDIUM 45

SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege e…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01373 Published 2022-06-01 No fix listed CWE-288
TI-2021-08353 CVE-2021-26636 · GHSA-c5f6-5rv4-j98x

Maxboard Remote Code Execution

Priority MEDIUM 44

Stored XSS and SQL injection vulnerability in MaxBoard could lead to occur Remote Code Execution, which could lead to information exposure and privilege escalation.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01522 Published 2022-06-22 No fix listed CWE-79
TI-2021-08350 CVE-2021-26633 · GHSA-5rr6-6jp4-779h

Maxboard SQL injection and LFI vulnerability

Priority MEDIUM 44

SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00919 Published 2022-06-01 No fix listed CWE-89
TI-2021-08346 CVE-2021-26628 · GHSA-4hqp-qgvw-892g

MaxBoard XSS and File Upload Vulnerability

Priority LOW 37

Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00786 Published 2022-04-26 No fix listed CWE-434
Open these records in search →