|
|
CVE Reference: CVE-2007-3938 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-3938 |
|
|
Description: SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before 20070720 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a view action in the Topics module, a different vulnerability than CVE-2006-1676. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/35506 SAID Secunia Advisory: SA26113 OSVDB 36336 MILW0RM http://www.milw0rm.com/exploits/4199 CONFIRM http://www.maxdev.com/mod-Areafiles-display-lid-557.phtml http://www.maxdev.com/Article637.phtml BID 24969 |
|
| Return to the previous page. |
