MAXdev MD-Pro 1.0.73 and possibly prior versions suffer from remote code execution, cross site scripting, and path disclosure vulnerabilities. Detailed exploitation provided.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39872/MAXdevMD-Pro1.0.73.txt
Source: https://packetstormsecurity.com/files/39872/MAXdevMD-Pro1.0.73.txt.html