CVE-2026-52673

MediumCVSS 6.5

Published: 23/06/2026(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

35th percentile — higher than 35% of all known CVEs

SQL Injection vulnerability in Cboard v.0.4.2 and earlier allows a remote attacker to execute arbitrary code via the getDimensionsValues component.

An attacker can gain unauthorized access to the database, steal or modify data, and in extreme cases take over the server.

Immediately update Cboard to the latest available version and apply parameterized SQL queries in the getDimensionsValues component.

Original NVD description (English source)

SQL Injection vulnerability in Cboard v.0.4.2 and before allows a remote attacker to execute arbitrary code via the getDimensionsValues component