Lucene search
MitreCVELIST:CVE-2006-1676HistoryApr 10, 2006 - 11:00 p.m.
CVE-2006-1676
2006-04-1023:00:00
mitre
www.cve.org
4
SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a display action, which is not properly handled in PNuserapi.PHP.
References
Related
cve
cve
CVE-2006-1676
2006-04-11 00:02:00
CVE-2007-3938
2007-07-21 00:30:00
prion
prion
Sql injection
2006-04-11 00:02:00
Sql injection
2007-07-21 00:30:00
exploitdb
exploitdb
MAXDEV CMS 1.0.72/1.0.73 - 'PNuserapi.php' SQL Injection
2006-04-06 00:00:00
nvd
nvd
CVE-2006-1676
2006-04-11 00:02:00
CVE-2007-3938
2007-07-21 00:30:00
cvelist
cvelist
CVE-2007-3938
2007-07-21 00:00:00