Description
SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Max Yi | MaxBoard | unspecified – ≤ 1.9.3.3 | — |