65 matches found
CVE-2007-3938
The CVE-2007-3938 entry concerns MAXdev MDPro (MD-Pro) prior to version 1.0.8x (before 20070720) where the index.php topicid parameter in the Topics module is not properly sanitized. The flaw allows an unauthenticated remote attacker to influence SQL queries executed by topics_userapi.php, potent...
7.5CVSS8.2AI score0.01236EPSS
SaveExploits1References7Affected Software1
CVE-2006-3938
CVE-2006-3938 affects DotClear. The vulnerability allows remote attackers to obtain sensitive information by directly requesting multiple files (e.g., edit_cat.php, syslog/index.php, class.blog.php, template.php) under /ecrire/tools/, /inc/, /layout/, and /themes/default/. The root cause is that ...
5CVSS6.6AI score0.02263EPSS
SaveExploits0References24Affected Software1
20