CVE-2006-1676

SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a display action, which is not properly handled in PNuserapi.PHP.

• CWE-89

• http://secunia.com/advisories/19578Vendor Advisory
• http://www.maxdev.com/Article592.phtmlURL Repurposed
• http://www.securityfocus.com/archive/1/430370/100/0/threaded
• http://www.securityfocus.com/archive/1/437831/100/100/threaded
• http://www.securityfocus.com/bid/17399
• http://www.vupen.com/english/advisories/2006/1282Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25710
• http://secunia.com/advisories/19578Vendor Advisory
• http://www.maxdev.com/Article592.phtmlURL Repurposed
• http://www.securityfocus.com/archive/1/430370/100/0/threaded
• http://www.securityfocus.com/archive/1/437831/100/100/threaded
• http://www.securityfocus.com/bid/17399
• http://www.vupen.com/english/advisories/2006/1282Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25710

Published

Apr 11, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1670Control cards for Cisco Optical Networking System (ONS) 1500…
• CVE-2006-1671Control cards for Cisco Optical Networking System (ONS) 1500…
• CVE-2006-1672The installation of Cisco Transport Controller (CTC) for Cis…
• CVE-2006-1673Cross-site scripting (XSS) vulnerability in vbugs.php in Dar…
• CVE-2006-1674Cross-site scripting (XSS) vulnerability in search.php in PH…
• CVE-2006-1675Multiple cross-site scripting (XSS) vulnerabilities in PHPWe…
• CVE-2006-1677MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions …
• CVE-2006-1678Multiple cross-site scripting (XSS) vulnerabilities in phpMy…
• CVE-2006-1679Cross-site scripting (XSS) vulnerability in modules/online.p…
• CVE-2006-1680Jupiter CMS 1.1.5, when display_errors is enabled, allows re…
• CVE-2006-1681Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0…
• CVE-2006-1682Cross-site scripting (XSS) vulnerability in webplus.exe in T…