Published: 03/05/2005 Updated: 05/09/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 775

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote malicious users to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
maxwebportal maxwebportal 1.3.5
maxwebportal maxwebportal 2.0
maxwebportal maxwebportal 1.3.1
maxwebportal maxwebportal 1.3.3
maxwebportal maxwebportal 1.3.0
maxwebportal maxwebportal 1.3.2

source: wwwsecurityfocuscom/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure o ...

source: wwwsecurityfocuscom/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure or modi ...

source: wwwsecurityfocuscom/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure or ...

source: wwwsecurityfocuscom/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure or mo ...

source: wwwsecurityfocuscom/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure ...

NVD-CWE-Other http://www.maxwebportal.info/downloads/mwp_security_fixes.zip http://www.securityfocus.com/bid/13466 http://securitytracker.com/id?1013845 http://secunia.com/advisories/15214 http://www.maxwebportal.info/topic.asp?TOPIC_ID=2482&FORUM_ID=1&CAT_ID=1&Forum_Title=General+Chat&Topic_Title=Security+Update https://nvd.nist.gov https://www.exploit-db.com/exploits/25588/

CVE-2005-1417

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect