Lucene search

K
prionPRIOn knowledge basePRION:CVE-2006-1676
HistoryApr 11, 2006 - 12:02 a.m.

Sql injection

2006-04-1100:02:00
PRIOn knowledge base
www.prio-n.com
3

8.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.4%

SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a display action, which is not properly handled in PNuserapi.PHP.

CPENameOperatorVersion
md-proeq1.0.72
md-prole1.0.75
md-proeq1.0.73

8.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.4%

Related for PRION:CVE-2006-1676