CVE-2005-2887: Maxdev Md-Pro

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) wiki.php, (2) AutoTheme directory, (3) Blocks directory, (4) admin.php, (5) pnadmin.php, or (6) Topics directory, which reveal the path in an error message.

Affected products

• Maxdev Md-Pro: version 1.0.73 only

Published 2005-09-14. Last modified 2026-06-16.