Maxdev vulnerabilities

Products

• Md-pro 9
• Mdpro 6
• Mdforum 2
• My Egallery 2

Newest

• maxdev mdforum SQL injection vulnerability in the MDForum module 2.x through 2.07 for MAXdev MDPro allows remote... CVE-2009-4577 7.5 HighJanuary 6, 2010
• maxdev my egallery SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to... CVE-2008-7038 Public exploit 7.5 HighAugust 24, 2009
• maxdev mdpro SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows... CVE-2009-2618 Public exploit 7.5 HighJuly 27, 2009
• maxdev cwguestbook SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD... CVE-2009-2307 Public exploit 7.5 HighJuly 2, 2009
• maxdev my egallery SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke... CVE-2009-0728 Public exploit 7.5 HighFebruary 24, 2009
• maxdev mdpro SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers... CVE-2007-5222 Public exploit 7.5 HighOctober 5, 2007
• maxdev mdpro SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before... CVE-2007-3938 Public exploit 7.5 HighJuly 21, 2007
• maxdev mdpro Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote... CVE-2006-7112 Public exploit 6.0 MediumMarch 6, 2007
• maxdev mdpro user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a ' (quote)... CVE-2007-0624 5.0 MediumJanuary 31, 2007
• maxdev mdpro SQL injection vulnerability in index.php in MAXdev MDPro 1.0.76 allows remote attackers to... CVE-2007-0623 Public exploit 7.5 HighJanuary 31, 2007
• maxdev mdforum Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1... CVE-2006-6869 Public exploit 9.3 HighDecember 31, 2006
• maxdev md-pro CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary... CVE-2006-5565 5.0 MediumOctober 27, 2006
• maxdev md-pro Cross-site scripting (XSS) vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote... CVE-2006-5564 Public exploit 4.3 MediumOctober 27, 2006
• maxdev md-pro Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote... CVE-2006-4964 6.8 MediumSeptember 23, 2006
• maxdev md-pro MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers... CVE-2006-1677 6.4 MediumApril 10, 2006
• maxdev md-pro SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro... CVE-2006-1676 Public exploit 6.4 MediumApril 10, 2006
• maxdev md-pro MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive... CVE-2005-2887 5.0 MediumSeptember 14, 2005
• maxdev md-pro The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete... CVE-2005-2885 Public exploit 7.5 HighSeptember 14, 2005
• maxdev md-pro Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and... CVE-2005-2840 10.0 HighSeptember 7, 2005
• maxdev md-pro Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote... CVE-2005-2839 4.3 MediumSeptember 7, 2005