CVE-2006-7112
Maxdev Mdpro < 1.0.76 - Path Traversal
Title source: ruleDescription
Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary files via the PNSVlang cookie, as demonstrated by uploading a GIF image using AddDownload or injecting PHP code into a log file, then accessing it.
Exploits (1)
Scores
EPSS
0.0404
EPSS Percentile
88.5%
Details
CWE
CWE-22
Status
published
Products (1)
maxdev/mdpro
< 1.0.76
Published
Mar 06, 2007
Tracked Since
Feb 18, 2026