Description
SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hometory | Mangboard WP BASIC | 2.0.3 – ≤ 2.0.3 | — |