MAXdev MD-Pro legacy.php Direct Request Path Disclosure

2006-04-06T05:47:39
ID OSVDB:24515
Type osvdb
Reporter OSVDB
Modified 2006-04-06T05:47:39

Description

Manual Testing Notes

http://[target]/maxdev/includes/legacy.php

References:

Vendor URL: http://www.maxdev.com/AboutMD.phtml Vendor Specific News/Changelog Entry: http://www.maxdev.com/Article592.phtml Secunia Advisory ID:19578 Related OSVDB ID: 24514 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-04/0148.html Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0431.html FrSIRT Advisory: ADV-2006-1282 CVE-2006-1677