Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f35m-48c3-v5mq

Опубликовано: 03 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use these vulnerabilities to perform attacks such as stealing server management rights using a web shell.

SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use these vulnerabilities to perform attacks such as stealing server management rights using a web shell.

EPSS

Процентиль: 65%
0.00498
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-288
CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use these vulnerabilities to perform attacks such as stealing server management rights using a web shell.

EPSS

Процентиль: 65%
0.00498
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-288
CWE-434