Unscored CVE-2005-1017 EUVD-2005-1020GHSA-fx55-j9cj-wv4h

SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers …

Published Apr 8, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENT_ID parameter, as demonstrated using events.asp.

References

1013617 vdb-entry
maxwebportal-eventsfunctions-sql-injection(19928) vdb-entry
14752 third-party-advisory
http://www.hackerscenter.com/archive/view.asp?id=1807
12968 vdb-entry