← Database

CVE-2009-4577

HIGH CVSS: 7.5 Published: 2010-01-06 Modified: 2026-06-16

Description

SQL injection vulnerability in the MDForum module 2.x through 2.07 for MAXdev MDPro allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php.

Affected Platforms

Maxdev MdforumMaxdev Mdpro

Weakness Type

CWE-89

References