Unscored CVE-2004-0272 EUVD-2004-0272GHSA-pq63-4vgj-rxhv

SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the Sen…

Published Mar 18, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages.

References

20040210 XSS, Sql Injection and Avatar ScriptCode Injection in MaxWebPortal mailing-list
9625 vdb-entry
maxwebportal-personalmesssages-sql-injection(15121) vdb-entry