CVE-2005-2839

MAXdev MD‑Pro 1.0.72 is affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script/HTML via parameters in dl-search.php and wl-search.php. The root cause is unsanitized user input enabling script execution in the web context. Affected product/version: MAXdev M...

CVE-2006-5564

CVE-2006-5564 is an XSS vulnerability in MAXdev MD-Pro 1.0.76, exploitable via the op parameter in user.php. The issue allows remote attackers to inject arbitrary web script/HTML. The NVD record lists a base score of 4.3 (Medium) with Network attack vector, no confidentiality impact, partial inte...