The MAXdev team has been notified of a security issue with Lost Password function. You can read about this exploit from
www.securityfocus.com
Another small bug was found with insertion of objects code, flash, video etc. this is not a security issue but we take this occasion to release also this fix.
We still recommend having the AntiCracker enabled
The patch is available at
MaxDev.com security fix patch and to apply this fix just replace files.
Please note that, MDStaff work always to keep MDPro stable and secure and another time we release a fix less than 24 hours after we have notice abot.
We strongly recommend all users apply this patch to their sites ASAP, all MDPro 1.0.76 packages have been updated to include this fix as from the 30/10/2006