Unscored CVE-2006-1677 EUVD-2006-1678GHSA-86hh-pr94-j386

MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to obtain the full path of the server via…

Published Apr 10, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to obtain the full path of the server via a direct request to includes/legacy.php.

References

http://www.maxdev.com/Article592.phtml
20060620 Re: MAXDEV CMS Multiple vulnerabilities mailing-list
19578 third-party-advisory
20060406 MAXDEV CMS Multiple vulnerabilities mailing-list
mdpro-legacy-path-disclosure(25714) vdb-entry
ADV-2006-1282 vdb-entry