{"id":"CVE-2005-1417","aliases":["EUVD-2005-1420","GHSA-8g92-h84q-8v35"],"status":"published","title":"Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote...","description":"Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02465,"percentile":0.84588,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2005-05-03T04:00:00Z","modified":"2026-06-16T22:13:00Z","exploits":[{"source":"exploitdb","id":"EDB-25585","title":"Maxwebportal 1.3 - 'dl_popular.asp' SQL Injection","type":"webapps","platform":"asp","date":"2005-05-02","verified":true,"url":"https://www.exploit-db.com/exploits/25585"},{"source":"exploitdb","id":"EDB-25586","title":"Maxwebportal 1.3 - 'links_popular.asp' SQL Injection","type":"webapps","platform":"asp","date":"2005-05-02","verified":true,"url":"https://www.exploit-db.com/exploits/25586"},{"source":"exploitdb","id":"EDB-25587","title":"Maxwebportal 1.3 - 'pic_popular.asp' SQL Injection","type":"webapps","platform":"asp","date":"2005-05-02","verified":true,"url":"https://www.exploit-db.com/exploits/25587"},{"source":"exploitdb","id":"EDB-25588","title":"Maxwebportal 1.3 - 'dl_toprated.asp' SQL Injection","type":"webapps","platform":"asp","date":"2005-05-02","verified":true,"url":"https://www.exploit-db.com/exploits/25588"},{"source":"exploitdb","id":"EDB-25589","title":"Maxwebportal 1.3 - 'custom_link.asp' Multiple SQL Injections","type":"webapps","platform":"asp","date":"2005-05-02","verified":true,"url":"https://www.exploit-db.com/exploits/25589"}],"products":[{"vendor":"maxwebportal","product":"maxwebportal"}],"references":[{"url":"http://www.securityfocus.com/bid/13466","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://secunia.com/advisories/15214","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://securitytracker.com/id?1013845","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Exploit"]},{"url":"http://www.maxwebportal.info/downloads/mwp_security_fixes.zip","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.maxwebportal.info/topic.asp?TOPIC_ID=2482\u0026FORUM_ID=1\u0026CAT_ID=1\u0026Forum_Title=General+Chat\u0026Topic_Title=Security+Update","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1417"},{"url":"https://github.com/advisories/GHSA-8g92-h84q-8v35"}],"sources":{"cve":[{"id":"CVE-2005-1417","description":"Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.","status":"published","published":"2005-05-03T04:00:00Z","modified":"2024-08-07T21:51:49.836Z","updated_at":"2026-11-02T14:33:39.916766Z"}],"euvd":[{"id":"EUVD-2005-1420","description":"Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.","status":"published","published":"2005-05-03T04:00:00Z","modified":"2024-08-07T21:51:49Z","updated_at":"2026-11-03T01:15:34.078669Z"}],"ghsa":[{"id":"GHSA-8g92-h84q-8v35","title":"Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote...","description":"Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.","status":"published","published":"2022-05-01T01:58:16Z","modified":"2023-01-30T05:07:13Z","updated_at":"2026-11-02T14:47:38.865804Z"}],"nvd":[{"id":"CVE-2005-1417","description":"Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.","status":"published","published":"2005-05-03T04:00:00Z","modified":"2026-06-16T22:13:00.613Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:55.266741Z"}]}}