Macromedia has issued an advisory regarding a security issue in Dreamweaver, potentially allowing malicious people to manipulate databases.

The problem is that "Using Driver On Testing Server" and "Using DSN on Testing Server" causes Dreamweaver to upload a script, which can be exploited to query valid DSNs and issue SQL queries.

This is not considered a vulnerability, as it is clearly stated that the functionality is intended for test systems.

The issue affects:
* Dreamweaver MX 2004
* Dreamweaver MX
* Dreamweaver UltraDev 4

Solution
Remove the script from production systems.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits David Litchfield, NGSSoftware.

Changelog
Further details available in Customer Area

Original Advisory
Macromedia:
http://www.macromedia.com/devnet/security/security_zone/mpsb04-05.html

NGSSoftware:
http://www.nextgenss.com/advisories/dreamweaver.txt

Deep Links
Links available in Customer Area