CVE-2005-1779: Undefined Security Weakness

SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter...

MaxWebPortal memKey Parameter SQL Injection

The remote host is running a version of MaxWebPortal that fails to properly sanitize input passed through the 'memKey' parameter to the 'password.asp' script. An attacker can exploit this flaw to modify database queries resulting in the disclosure of sensitive information, modification of data fo...

MaxWebPortal password.asp memKey Parameter SQL Injection

Binary data 2937.prm...