CVE-2006-1677: Maxdev Md-Pro

Medium severity, CVSS 6.4. EPSS: 1.5% chance of exploitation in the next 30 days.

MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to obtain the full path of the server via a direct request to includes/legacy.php.

Affected products

• Maxdev Md-Pro: up to and including 1.0.75; version 1.0.72 only; version 1.0.73 only

Published 2006-04-11. Last modified 2026-06-16.