CVE-2007-3938 SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before 20070720 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a view actio...
HighCVSS 7.5
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before 20070720 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a view action in the Topics module, a different vulnerability than CVE-2006-1676.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maxdev mdpro | <= 1.0.8x | No fix listed |
References
- 36336 vdb-entry
- 26113 third-party-advisory vendor-advisory
- www.maxdev.com url-repurposed vendor-advisory
- www.maxdev.com url-repurposed
- 24969 vdb-entry
- mdpro-topicid-sql-injection(35506) vdb-entry
- 4199 exploit