{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-07T12:30:41.007","vulnerabilities":[{"cve":{"id":"CVE-2021-26644","sourceIdentifier":"vuln@krcert.or.kr","published":"2023-01-20T17:15:10.413","lastModified":"2024-11-21T05:56:38.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running."},{"lang":"es","value":"Vulnerabilidad de inyección SQL causada por la falta de verificación de los valores de entrada para el nombre de la tabla de la base de datos utilizada por el tablero de anuncios Mangboard. Un atacante remoto puede utilizar esta vulnerabilidad para ejecutar código arbitrario en el servidor donde se ejecuta el tablón de anuncios."}],"metrics":{"cvssMetricV31":[{"source":"vuln@krcert.or.kr","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"vuln@krcert.or.kr","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mangboard:mangboard_wp:2.0.3:*:*:*:basic:wordpress:*:*","matchCriteriaId":"129C2646-F7EF-47C6-8449-287B9FE54A77"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=67127","source":"vuln@krcert.or.kr","tags":["Third Party Advisory"]},{"url":"https://boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=67127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}