CVE-2005-2885

CVE-2005-2885 describes an arbitrary file upload vulnerability in MAXdev MD-Pro 1.0.73 and potentially earlier versions, specifically within its Downloads page functionality. The flaw stems from an incomplete blacklist used to validate file extensions, allowing attackers to bypass security checks. This vulnerability carries a CVSS score of 7.5, indicating high severity, as it can be exploited remotely with low complexity to achieve partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an exploit is publicly available on ExploitDB, though community discussion and media coverage are minimal.