MaxWebPortal 1.3 dl_popular.asp SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

MaxWebPortal 1.30 search.asp Search Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/7837/info A number of vulnerabilities have been discovered in the MaxWebPortal. The issues that have been discovered include: MaxWebPortal 'search.asp' has been reported prone to a cross-site scripting vulnerability. An...

MaxWebPortal 1.3x Personal Message SendTo Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/9625/info It has been reported that MaxWebPortal may be prone to multiple vulnerabilities due to insufficient sanitization of user-supplied input. The specific issues include cross-site scripting, HTML injection and SQL...

MaxWebPortal 1.3 pic_popular.asp SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

MaxWebPortal 1.3x down.asp HTTP_REFERER XSS

No description provided by source. source: http://www.securityfocus.com/bid/9625/info It has been reported that MaxWebPortal may be prone to multiple vulnerabilities due to insufficient sanitization of user-supplied input. The specific issues include cross-site scripting, HTML injection and SQL...

Sql injection

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the 1 FORUMID or 2 CATID parameter. NOTE: this might overlap CVE-2005-1417...

CVE-2009-3436

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the 1 FORUMID or 2 CATID parameter. NOTE: this might overlap CVE-2005-1417...

CVE-2009-3436

CVE-2009-3436 concerns the MaxWebPortal ASP application. The vulnerability is a SQL injection in the forum.asp script accessible via the parameters FORUM_ID or CAT_ID , allowing remote attackers to execute arbitrary SQL commands. This mirrors related disclosures (e.g., CVE-2005-1417) and is corro...

CVE-2009-3436

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the 1 FORUMID or 2 CATID parameter. NOTE: this might overlap CVE-2005-1417...

MaxWebPortal SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

Maxwebportal 1.365 - 'forum.asp' SQL Injection

source: https://www.securityfocus.com/bid/36480/info MaxWebPortal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

maxwebportalxss.txt

--Alt-Boundary-12164.15822371 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: Maxwebportal 1.3.5 and prior Risk: High MaxWebPortal is...

CVE-2005-1779

SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter...

CVE-2005-1779

The CVE-2005-1779 entry is supported by multiple connected sources describing a SQL injection in MaxWebPortal’s password.asp (memKey parameter) across versions 1.35, 1.36, 2.0, and 20050418 Next. The root cause is improper sanitization of input passed to memKey, allowing remote attackers to modif...

CVE-2005-1779

SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter...

maxwebportal136-1.txt

-----------------Code Start-----Version 1.35 and older-------------- pass1: pass2: Id: Member Key: -----------------End------------------- Version 1.36, 2.0, 20050418 Next: -----------------Code Start-----Version 1.36, 2.0, 20050418 Next-------------- pass1: pass2: Id: Member Key:...

[EXPL] MaxWebPortal Administrator Password Retrieval (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

maxwebportal136-2.txt

------------------------------------------ / Config address - example: http://www.site.com/password.asp $url = "http://www.mohamad.com/password.asp"; $mh = "s1"; if webmaxportal version is : Version 1.35 and older please input $mh= "s1" if webmaxportal version is : Version 1.36 , 2.0 please input...

Maxwebportal 1.36 - Password.asp Change Password (3) (Perl)

Maxwebportal 1.36 - Password.asp Change Password 3 Perl !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR - MAX Portal All Versions Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] This Xpl Change Admin's Pass in This...

Maxwebportal <= 1.36 password.asp Change Password Exploit (3 - perl)

No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR - MAX Portal All Versions Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] This Xpl Change Admin's Pass in This Portal !! Discovered by:...