CVE-2005-1017

CVE-2005-1017 affects MaxWebPortal versions up to 1.33, where the Update_Events function in events_functions.asp is vulnerable to SQL injection via the EVENT_ID parameter (as demonstrated using events.asp). This can allow remote attackers to execute arbitrary SQL commands. The connected sources c...

CVE-2005-1017

SQL injection vulnerability in the UpdateEvents function in eventsfunctions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENTID parameter, as demonstrated using events.asp...