CVE:CVE-2009-4577
CNNVD:CNNVD-201001-031
MAXdev MDPro MDForum 模块中存在SQL注入漏洞。远程攻击者可以借助提交到index.php的c参数，导致执行任意的SQL指令。
solution:Upgrade maxdev mdforum to a higher version than 2.0.1,and avoid the version 2.0.1