NVD

Id
60381  
Name
CVE-2006-1676  
Description
SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a display action, which is not properly handled in PNuserapi.PHP.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-04-10  
Modified Date
2011-08-05  
Seq
2006-1676  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
310986 60381 CVE-2006-1676 http://www.maxdev.com/Article592.phtml  View
310987 60381 CVE-2006-1676 20060406 MAXDEV CMS Multiple vulnerabilities  View
310988 60381 CVE-2006-1676 20060620 Re: MAXDEV CMS Multiple vulnerabilities  View
310989 60381 CVE-2006-1676 17399  View
310990 60381 CVE-2006-1676 ADV-2006-1282  View
310991 60381 CVE-2006-1676 mdpro-index-sql-injection(25710)  View

Related JVN