7.5
CVSSv2

CVE-2005-1779

Published: 31/05/2005 Updated: 05/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 765
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote malicious users to execute arbitrary SQL commands via the memKey parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

maxwebportal maxwebportal 1.36

maxwebportal maxwebportal 2005-04-18

maxwebportal maxwebportal 1.35

maxwebportal maxwebportal 2.0

Exploits

<?php /* ------Trap-Set Underground Hacking Team-----------------mh_p0rtal---------------------- Greetz to : Alpha_programmer , Oil_karchack , Str0ke And Iranian Hacking & Security Teams : Alphast , IHS Team , Shabgard Security Team , Emperor Hacking TEam , CrouZ Security Team , Simorgh-ev Security Team ----------------Discovered by: s ...
<!-- Hi, I'm Soroush Dalili from Grayhatz Security Group (GSG) I found dangerous sql injection in Maxwebportal version 135,136,20, 20050418 Next Remote user can inject his/her code in "memKey" var and change other users password in passwordasp Exploit codes to proof: --> -----------------Code Start-----Version 135 and older-------- ...
#!/usr/bin/perl ################################################################# # T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m ################################################################# # EXPLOIT FOR - MAX Portal (All Versions) # #Exploit By : A l p h a _ P r o g r a m m e r ( Sirus-v ); #E-Mail : Alpha_Programmer@ ...