CVE-2005-1562

Multiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 fpassword parameter to incfunctions.asp, 2 txtAddress, 3 message, or 4 subject parameter to postinfo.asp, 5 andor parameter to search.asp, 6 verkey parameter...