Approved changes feed: RSS · Atom

cpe:2.3:a:maxwebportal:maxwebportal:1.3.0:*:*:*:*:*:*:*

part: a version: 1.3.0 update: *

VendorMaxwebportal (5e39fb56-9b21-56f2-97a8-3ec5c7b76a92)
ProductMaxwebportal (3e0469df-3bc0-5b67-9ec5-99dec221a87f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-1562 vulnerable 2026-06-08 04:48:26.919803 Details available
Multiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fpassword parameter to inc_functions.asp, (2) txtAddress, (3) message, or (4) subject parameter to post_info.asp, (5) andor parameter to search.asp, (6) verkey parameter to pop_profile.asp, or (7) Remove or (8) Delete parameter to pm_delete2.asp.
Published: 2005-05-14T04:00:00.000Z
Updated: 2024-08-07T21:51:50.411Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1561 vulnerable 2026-06-08 04:48:26.919369 Details available
Multiple cross-site scripting (XSS) vulnerabilities in post.asp in MaxWebPortal 1.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mod, (2) M, or (3) type parameter.
Published: 2005-05-14T04:00:00.000Z
Updated: 2024-08-07T21:51:50.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1417 vulnerable 2026-06-08 04:48:26.584125 Details available
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.
Published: 2005-05-03T04:00:00.000Z
Updated: 2024-08-07T21:51:49.836Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.