A new module release to MDBoosters, a new release of CMpro 1.2.2 (Content Management Professional) module for MDPro.

The MAXdev team has been notified of a security issue, the problem was found to be due to directory traversal vulnerability in error.php in MDPro 1.076 and earlier allows remote attackers to include and execute arbitrary local files under certain circumstances via the PNSVlang session variable which is included by error.php.

The MAXdev team has been notified of a security issue with Lost Password function. You can read about this exploit from www.securityfocus.com

The MAXdev team has been notified of a security issue by http://www.jpcert.or.jp the problem was found to be due to poor performance of the pnVarCleanFromInput function at removing potentially harmful input that may result in XSS injection attacks

While MAXdev staff work to develop MD 1.1 and MDLite (we plan to release it in next days to MDBoosters), we always working to keep MDPro secure and to remove known bugs. Today we release a new update package for MDPro 1.076, and we have fixed some vulnerabilities issues and small bugs.

MDPro Lite, alias MDLite, is ready :)

After a lot of work and a lot of time, finally MDLite, for now just in RC release, is ready. To help us make the final release as soon as possible, please download it, use it, test it and report any bugs, and/or your comments and suggestions. Read more here..

The MAXdev team has been notified of a security issue, the problem was found to be due to directory traversal vulnerability in error.php in MDPro 1.076 and earlier allows remote attackers to include and execute arbitrary local files under certain circumstances via the PNSVlang session variable which is included by error.php.

Welcome to the new face of MAXdev.com
Things have been quiet on MAXdev for a while, rest assured we've been hard at work on a number of fronts and in next weeks we plan to release several new things and nice surprises, so ... stay tuned :)

MDPro is an innovative content management system in a constant state of refinement. The entire core of the product is being replaced and improved as we transition to our next generation CMS, MDPro 1.1. In the process, we are making it leaner and faster by optimizing it for performance and flexibility. MDLite needs less memory to work and works faster. MDLite represents a bridge to the technology in MDPro 1.1 and features some of the changes that will be a part of future generations of MDPro, including the structure.

Please be aware that we have re-opened the public CVS in Sourceforge. You can now download MDPro, language files and documentation from Sourceforge.

You've seen us mention it a number of times in the past over the last several months. The last mention was when the requisite documents had crossed from the North American continent to Europe, with a brief stopover in England, to gather the necessary signatures.