← back
CVE-2005-1417

CVE-2005-1417

EPSS 2.5%
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.
Affected products
n/a · n/a
public PoCs found — 5
exploitdbwww.exploit-db.com/exploits/25589unverifiedexploitdbwww.exploit-db.com/exploits/25585unverifiedexploitdbwww.exploit-db.com/exploits/25588unverifiedexploitdbwww.exploit-db.com/exploits/25586unverifiedexploitdbwww.exploit-db.com/exploits/25587unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/15214http://securitytracker.com/id?1013845http://www.maxwebportal.info/downloads/mwp_security_fixes.ziphttp://www.maxwebportal.info/topic.asp?TOPIC_ID=2482&FORUM_ID=1&CAT_ID=1&Forum_Title=General+Chat&Topic_Title=Security+Updatehttp://www.securityfocus.com/bid/13466