Md-pro vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

MD

Product

Md-pro

by Maxdev · last CVE Oct 27, 2006

9

CVEs

0

On KEV

–

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities9 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Md-pro to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2006-5565	–	1%	Oct 27	CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the (1) name, (2) file, (3) module, and (4)… Affected: through 1.0.76
CVE-2006-5564	–	2%	Oct 27	Cross-site scripting (XSS) vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary web script or HTML via the op parameter Affected: through 1.0.76
CVE-2006-4964	–	1%	Sep 23	Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbitrary web script or HTML via (1) vectors that bypass the XSS… Affected: through 1.0.76; 1.0.72; 1.0.73; 1.0.75
CVE-2006-1676	–	1%	Apr 11	SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote… Affected: through 1.0.75; 1.0.72; 1.0.73
CVE-2006-1677	–	1%	Apr 11	MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to obtain the full path of the server via a direct request to includes/legacy.php Affected: through 1.0.75; 1.0.72; 1.0.73
CVE-2005-2887	–	2%	Sep 14	MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) wiki.php, (2) AutoTheme directory, (3)… Affected: 1.0.73
CVE-2005-2885	–	9%	Sep 14	The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which could allow remote attackers… Affected: 1.0.73
CVE-2005-2840	–	1%	Sep 7	Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of the (1) Download, (2) Search, (3) Web… Affected: through 1.0.72
CVE-2005-2839	–	1%	Sep 7	Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via (1) dl-search.php or (2)… Affected: 1.0.72