Bug: MDPro 1.0.76 - Multiple Remote Vulnerabilities (WLB-2007020003 Ascii Version)

	WLB2
Full List

Bugs

Bogus

Tricks

Exploits

	CVE MAP
Full List

Vendors

Products

	Tools
CWE Dictionary

Google Hacking

	Search
General

CVE

CWE

	RSS
Full List

Bugs

Exploits

Dorks

	Information
Our services

Add note

About



	Submit
To add a note, use this form or send email to submit@cxsecurity.com When contacting via email, we recommend coded messages. Get our PGP public key

Topic:	MDPro 1.0.76 - Multiple Remote Vulnerabilities
Credit:	adex
Date:	2007.02.01
CWE:	N/A
CVE:	CVE-2007-0624 (Show details) CVE-2007-0623 (Show details) Use CVE to see details like: - CVSS2, - Affected Software, - References

Risk	Local		Remote
High	No		Yes

_____SQL Injection:

index.php?module=News&startrow='[sql injection]

_____Show path to script:

user.php?op=userinfo&uname='