Maxwebportal

12 CVEs across 1 Maxwebportal products. Browse Maxwebportal vulnerabilities, severities, and proof-of-concept exploits.

Maxwebportal products with known CVEs

ProductCVEs
Maxwebportal12
Maxwebportal CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2009-34362009-09-28Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID or (2) CAT_ID…
CVE-2005-17792005-05-31SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via th…
CVE-2005-15622005-05-11Multiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fpassword paramet…
CVE-2005-15612005-05-11Multiple cross-site scripting (XSS) vulnerabilities in post.asp in MaxWebPortal 1.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML…
CVE-2005-14172005-05-03Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_p…
CVE-2005-10172005-05-02SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary…
CVE-2005-10162005-05-02Cross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML…
CVE-2004-02722004-11-23SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Per…
CVE-2004-02712004-11-23Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name…
CVE-2003-12132003-12-31The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attacker…
CVE-2003-12122003-12-31MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the (1) news, (2) lock, or (3) allmem fields…
CVE-2003-12112003-12-31Cross-site scripting (XSS) vulnerability in search.asp for MaxWebPortal 1.30 and possibly earlier versions allows remote attackers to inject arbitrary web scri…