CVE-2005-2839

MAXdev MD‑Pro 1.0.72 is affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script/HTML via parameters in dl-search.php and wl-search.php. The root cause is unsanitized user input enabling script execution in the web context. Affected product/version: MAXdev M...

CVE-2005-2840

MAXdev MD-Pro is affected (versions 1.0.72 and earlier). The vulnerability impacts one or more modules: Download, Search, Web links, Blocks, Messages, News, Comments, Settings, Stats, or subjects. The connected PT-2005-3706 entry states the issue has unknown impact and unknown attack vectors and ...

CVE-2005-2840

Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of the 1 Download, 2 Search, 3 Web links, 4 Blocks, 5 Messages, 6 News, 7 Comments, 8 Settings, 9 Stats or 10 subjects modules...

PT-2005-3706 · Maxdev · Maxdev Md-Pro

Name of the Vulnerable Software and Affected Versions: MAXdev MD-Pro versions 1.0.72 and earlier Description: The issue affects one or more modules in MAXdev MD-Pro, including the Download, Search, Web links, Blocks, Messages, News, Comments, Settings, Stats, or subjects modules. The impact and...

MAXdev MD-Pro 1.0.73 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14751/info MAXdev MD-Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

MAXdev MD-Pro 1.0.73 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/14750/info MAXdev MD-Pro is prone to an arbitrary remote file upload vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. This issue is due to a design error in the application that uses a blacklist...

MAXdev MD-Pro 1.0.73 - Arbitrary File Upload

MAXdev MD-Pro 1.0.73 - Arbitrary File Upload source: https://www.securityfocus.com/bid/14750/info MAXdev MD-Pro is prone to an arbitrary remote file upload vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. This issue is due to a design erro...

XML-RPC for PHP Remote Code Injection Vulnerability

Description XML-RPC for PHP is affected by a remote code-injection vulnerability. An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks, including unauthorized remote access. XML-RPC for PHP 1.1 and prior...