MaxWebPortal <= 1.35 Multiple Vulnerabilities

According to its banner, the remote host is running a version of MaxWebPortal that is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation of these flaws may result in password theft and/or site defacement. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[HSC Security Group] MaxWebPortal - Multiple SQL injection/XSS

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: Maxwebportal 1.3.5 and prior Risk: High MaxWebPortal is probably the most spread ASP based web portal script. I've found multiple XSS and Sql injection that could easily lead to password strealing or porta...

CVE-2005-1561

Multiple cross-site scripting XSS vulnerabilities in post.asp in MaxWebPortal 1.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 mod, 2 M, or 3 type parameter...

CVE-2005-1562

Multiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 fpassword parameter to incfunctions.asp, 2 txtAddress, 3 message, or 4 subject parameter to postinfo.asp, 5 andor parameter to search.asp, 6 verkey parameter...

Maxwebportal 1.3x - post.asp Multiple Cross-Site Scripting Vulnerabilities

Maxwebportal 1.3x - post.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13601/info MaxWebPortal is affected by multiple remote vulnerabilities. These issues may allow an attacker to carry out cross-site scripting, SQL injection and HTML injection...

MaxWebPortal < 1.360 Multiple Vulnerabilities

Binary data 2898.prm...

Maxwebportal 1.3x - 'post.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13601/info MaxWebPortal is affected by multiple remote vulnerabilities. These issues may allow an attacker to carry out cross-site scripting, SQL injection and HTML injection attacks. MaxWebPortal 1.3.5 and prior versions are reportedly vulnerable to thes...

CVE-2005-1417

MaxWebPortal 2.x, 1.35 and related versions are affected by multiple SQL injection vulnerabilities. The flaws allow remote attackers to inject arbitrary SQL via numerous ASP scripts (article_popular.asp, dl_popular.asp, links_popular.asp, pic_popular.asp, article_rate.asp, dl_rate.asp, links_rate...

CVE-2005-1417

Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via 1 articlepopular.asp, 2 arguments to dlpopular.asp, 3 arguments to linkspopular.asp, 4 arguments to picpopular.asp, 5 articlerate.asp, 6 dlrate.asp, 7...

CVE-2005-1417

Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via 1 articlepopular.asp, 2 arguments to dlpopular.asp, 3 arguments to linkspopular.asp, 4 arguments to picpopular.asp, 5 articlerate.asp, 6 dlrate.asp, 7...

CVE-2005-1016

Cross-site scripting XSS vulnerability in linksaddform.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL...

CVE-2005-1017

SQL injection vulnerability in the UpdateEvents function in eventsfunctions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENTID parameter, as demonstrated using events.asp...

Maxwebportal 1.3 - 'dl_toprated.asp' SQL Injection

source: https://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in...

MaxWebPortal < 1.3.5 Multiple SQL Injection

Binary data 2874.prm...

Maxwebportal 1.3 - 'custom_link.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in...

Maxwebportal 1.3 - custom_link.asp Multiple SQL Injections

Maxwebportal 1.3 - customlink.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using ...

Maxwebportal 1.3 - dl_toprated.asp SQL Injection

Maxwebportal 1.3 - dltoprated.asp SQL Injection source: https://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

Maxwebportal 1.3 - dl_popular.asp SQL Injection

Maxwebportal 1.3 - dlpopular.asp SQL Injection source: https://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

Maxwebportal 1.3 - 'links_popular.asp' SQL Injection

source: https://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in...

CVE-2005-1016

Cross-site scripting XSS vulnerability in linksaddform.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL...