CVE-2009-4577

The CVE-2009-4577 issue affects MAXdev MDPro’s MDForum module (version 2.x up to 2.07). The vulnerability is a SQL injection in the MDForum component, exploitable via the c parameter to index.php, allowing remote attackers to execute arbitrary SQL commands. PT-2010-1396 details confirm the affect...