{"id":"CVE-2007-0624","title":"user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a ' (quote) character, and possibly other invalid values","published":"2007-01-31T14:28:00.000Z","updated":"2026-06-16T18:35:57.043Z","severity":"medium","cvssScore":5,"epss":0.01324,"epssPct":0.71349,"kev":false,"maturity":"none","actionScore":20,"primaryVendor":"maxdev","primaryProduct":"mdpro","cweId":null,"fixAvailable":false,"tags":["pre-auth","remote"],"epssDelta7":0.0011,"summary":"user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a ' (quote) character, and possibly other invalid values, in the uname parameter in a userinfo operation.","cvssVector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","cvssVersion":"2.0","cvssSource":"nvd-primary","cweName":null,"kevAdded":null,"kevDue":null,"kevRansomware":null,"source":"nvd","cna":"mitre","ssvc":null,"sources":{"cna":"2024-08-07T12:26:54.123Z","epss":"2026-11-12","cna_seen":"2026-09-29T10:44:18.799Z"},"cvssCna":null,"hasPatchRef":false,"credits":[],"counts":{"exploitdb":0,"metasploit":0,"nuclei":0,"githubPoc":0},"products":[{"vendor":"maxdev","product":"mdpro","cpe":"cpe:2.3:a:maxdev:mdpro"}],"references":[{"url":"http://osvdb.org/33613","tags":null},{"url":"http://securityreason.com/securityalert/2198","tags":null},{"url":"http://www.securityfocus.com/archive/1/458438/100/0/threaded","tags":null},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31898","tags":null}],"exploits":[],"analysis":null,"affectedVersions":[{"vendor":"maxdev","product":"mdpro","version":"1.0.76","vsi":null,"vse":null,"vei":null,"vee":null}],"source_attribution":"NVD (NIST), CVE Program, CISA KEV, FIRST EPSS, OSV. Aggregated by Noroxi."}