CVE-2007-0624: Medium severity MAXdev MDPro vulnerability
Published Jan 31, 2007
·Updated
user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a ' (quote) character, and possibly other invalid values, in the uname parameter in a userinfo operation.
Affected Software
1 affected component
MAXdev MDPro=1.0.76
Event History
Jan 31, 2007
CVE Published
06:28 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0624?
CVE-2007-0624 is classified as a medium severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2007-0624?
To fix CVE-2007-0624, update to a patched version of MAXdev MDPro that addresses this vulnerability.
3
What is the impact of exploiting CVE-2007-0624?
Exploiting CVE-2007-0624 allows attackers to obtain the full path of the user file, which can lead to further attacks.
4
Which version of MAXdev MDPro is affected by CVE-2007-0624?
MAXdev MDPro version 1.0.76 is the only version directly affected by CVE-2007-0624.
5
Can CVE-2007-0624 be exploited remotely?
Yes, CVE-2007-0624 can be exploited remotely by sending specially crafted requests.