VULNERABILITY INTELLIGENCE

CVE-2006-1677

CVSS score6.4 MEDIUM
EPSS probability1.49%
CISA KEVNot currently listed
Published2006-04-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to obtain the full path of the server via a direct request to includes/legacy.php.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references