VYPR
Unrated severityNVD Advisory· Published Jan 6, 2010· Updated Apr 23, 2026

CVE-2009-4577

CVE-2009-4577

Description

SQL injection vulnerability in the MDForum module 2.x through 2.07 for MAXdev MDPro allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.