CVE-2009-4577 in MDForuminfo

Summary

SQL injection vulnerability in the MDForum module 2.x through 2.07 for MAXdev MDPro allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

01/06/2010

Disclosure

01/06/2010

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

Sources