maxdev md-pro 1.0.72 vulnerabilities and exploits

(subscribe to this query)

6.4

CVSSv2

MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions prior to 1.076, allows remote malicious users to obtain the full path of the server via a direct request to includes/legacy.php.

Maxdev Md-pro 1.0.72 Maxdev Md-pro Maxdev Md-pro 1.0.73

6.4

CVSSv2

SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other versions prior to 1.076, allows remote malicious users to execute arbitrary SQL commands via the topicid parameter in a display action, which i...

Maxdev Md-pro 1.0.72 Maxdev Md-pro Maxdev Md-pro 1.0.73

1 EDB exploit

6.8

CVSSv2

Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 prior to 20060918 allows remote malicious users to inject arbitrary web script or HTML via (1) vectors that bypass the XSS protection mechanisms of the pnVarCleanFromInput function, and (2) unspecified vectors relate...

Maxdev Md-pro 1.0.72 Maxdev Md-pro 1.0.75 Maxdev Md-pro 1.0.73 Maxdev Md-pro

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote malicious users to inject arbitrary web script or HTML via (1) dl-search.php or (2) wl-search.php.

Maxdev Md-pro 1.0.72

10

CVSSv2

Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and previous versions have unknown impact and unspecified attack vectors, in one or more of the (1) Download, (2) Search, (3) Web links, (4) Blocks, (5) Messages, (6) News, (7) Comments, (8) Settings, (9) Stats or (10) subj...

Maxdev Md-pro

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook