📦

md-pro

Vendor: maxdev

Actively Exploited 0 CISA KEV List
PoC / Exploits 5 Code Available
Total RCEs 1 Remote Access
Total CVEs 26 Total Indexed
Avg. EPSS 1.92% Exploit Prob.
Latest CVE CVE-2009-2307 Jul 02

Security Vulnerability Index

Page 2 / 3
4.3 CVSS

Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via (1) dl-search.php or (2) wl-search.php.

EPSS: 0.95%
10.0 CVSS

Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of the (1) Download, (2) Search, (3) Web links, (4) Blocks, (5) Messages, (6) News, (7) Comments, (8) Settings, (9) Stats or (10) subjects modules.

EPSS: 1.42%