Sql injection

2010-01-0622:00:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

67.9%

JSON

SQL injection vulnerability in the MDForum module 2.x through 2.07 for MAXdev MDPro allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php.

CPENameOperatorVersion
mdforumeq2.0.1

CPE	Name	Operator	Version
	mdforum	eq	2.0.1

References

secunia.com/advisories/37748

www.maxdev.com/Article661.phtml

www.osvdb.org/61347

www.securityfocus.com/bid/37488

exchange.xforce.ibmcloud.com/vulnerabilities/55138