high7.5Public exploit code
CVE-2005-1779
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Maxwebportal 1.36 - 'Password.asp' Change Password (1) (HTML)2005-05-26 · webapps · asp · Verified
- Maxwebportal 1.36 - 'Password.asp' Change Password (2)2005-05-26 · webapps · asp · Verified
- Maxwebportal 1.36 - 'Password.asp' Change Password (3)2005-05-26 · webapps · asp · Verified
Impact
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maxwebportal | Maxwebportal | Versions 1.35, 1.36, 2.0, 2005-04-18 |