Current Stable MDPro Lite 1.0821 
Welcome
as a registered user you have some advantages like free downloads, comments and posting on our forums, depending upon this site's configuration and options.
Forums
Documentation
MAXdev Community
Latest Comments
Re: MDForum security fix
Thanks for the fixed! auctions antiques ... aubreehill
Re: MDPro 1.083 RC r...
thanks for the realeased! mac to ipod ... aubreehill
Re: Security fix for...
i think those black mailers are just jealous of what yo... aubreehill
|
Posted by : TiMax -
Tuesday, November 21, 2006
 The MAXdev team has been notified of a security issue, the problem was found to be due to directory traversal vulnerability in error.php in MDPro 1.076 and earlier allows remote attackers to include and execute arbitrary local files under certain circumstances via the PNSVlang session variable which is included by error.php. The patch is available from HERE this affects all versions of MDPro released up until this point. Many thanks go to Larsneo for his help and collaboration We strongly recommend all users apply this patch to their sites ASAP, all MDPro 1.0.76 packages have been updated to include this fix as from the 21-Nov-06 07:00 GMT
|
