CVE

Id
23981  
CVE No.
CVE-2007-0624  
Status
Candidate  
Description
user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a " (quote) character, and possibly other invalid values, in the uname parameter in a userinfo operation.  
Phase
Assigned (20070131)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
233703 23981 CVE-2007-0624 BUGTRAQ:20070129 MDPro 1.0.76 - Multiple Remote Vulnerabilities  View
233704 23981 CVE-2007-0624 URL:http://www.securityfocus.com/archive/1/archive/1/458438/100/0/threaded  View
233705 23981 CVE-2007-0624 OSVDB:33613  View
233706 23981 CVE-2007-0624 URL:http://osvdb.org/33613  View
233707 23981 CVE-2007-0624 SREASON:2198  View
233708 23981 CVE-2007-0624 URL:http://securityreason.com/securityalert/2198  View
233709 23981 CVE-2007-0624 XF:mdpro-user-path-disclosure(31898)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52793 JVNDB-2007-001485 Drupal および vbDrupal の comment_form_add_preview 関数における任意のコードを実行される脆弱性 Drupal および vbDrupal の comment.module の comment_form_add_preview 関数には、"通常フォーム検証ルーチン" 処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2007-0626 23981 7.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001485.html  View