MaxWebPortal memKey Parameter SQL Injection

The remote host is running a version of MaxWebPortal that fails to properly sanitize input passed through the 'memKey' parameter to the 'password.asp' script. An attacker can exploit this flaw to modify database queries resulting in the disclosure of sensitive information, modification of data fo...

MaxWebPortal password.asp memKey Parameter SQL Injection

Binary data 2937.prm...