CVE-2006-4964

Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbitrary web script or HTML via (1) vectors that bypass the XSS protection mechanisms of the pnVarCleanFromInput function, and (2) unspecified vectors related to the AntiCracker.

• http://jvn.jp/jp/JVN%2346630603/index.html
• http://secunia.com/advisories/22050Patch, Vendor Advisory
• http://www.maxdev.com/Article605.phtmlPatch, URL Repurposed
• http://www.maxdev.com/Downloads-index-req-dldet-lid-497-ttitle-Security_fix_for_MDPro_1.076.phtmlPatch, URL Repurposed
• http://www.securityfocus.com/bid/20133Patch
• http://www.vupen.com/english/advisories/2006/3732
• http://jvn.jp/jp/JVN%2346630603/index.html
• http://secunia.com/advisories/22050Patch, Vendor Advisory
• http://www.maxdev.com/Article605.phtmlPatch, URL Repurposed
• http://www.maxdev.com/Downloads-index-req-dldet-lid-497-ttitle-Security_fix_for_MDPro_1.076.phtmlPatch, URL Repurposed
• http://www.securityfocus.com/bid/20133Patch
• http://www.vupen.com/english/advisories/2006/3732

Published

Sep 23, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4958Multiple cross-site scripting (XSS) vulnerabilities in Sun S…
• CVE-2006-4959Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 …
• CVE-2006-4960Cross-site scripting (XSS) vulnerability in index.php Php Bl…
• CVE-2006-4961SQL injection vulnerability in the GetModuleConfig function …
• CVE-2006-4962Directory traversal vulnerability in pbd_engine.php in Php B…
• CVE-2006-4963Directory traversal vulnerability in index.php in Exponent C…
• CVE-2006-4965Apple QuickTime 7.1.3 Player and Plug-In allows remote attac…
• CVE-2006-4966PHP remote file inclusion vulnerability in inc/ifunctions.ph…
• CVE-2006-4967Multiple cross-site scripting (XSS) vulnerabilities in NextA…
• CVE-2006-4968PHP remote file inclusion vulnerability in includes/function…
• CVE-2006-4969Multiple PHP remote file inclusion vulnerabilities in WAHM E…
• CVE-2006-4970PHP remote file inclusion vulnerability in enc/content.php i…