Maxdev : Security Vulnerabilities, CVEs, Published In 2009
SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php.
Max CVSS
7.5
EPSS Score
0.06%
Published
2009-07-27
Updated
2017-09-19
SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php.
Max CVSS
7.5
EPSS Score
0.11%
Published
2009-07-02
Updated
2017-09-19
SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php.
Max CVSS
7.5
EPSS Score
0.07%
Published
2009-02-24
Updated
2017-09-29
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.
Max CVSS
7.5
EPSS Score
0.12%
Published
2009-08-24
Updated
2018-10-11
4 vulnerabilities found