Exploitation Summary
EIP tracks 5 public exploits for CVE-2005-1417. PoCs published by s-dalili.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in MaxWebPortal, specifically in the 'pics_popular.asp' file. It outlines how improper sanitization of user input can lead to data disclosure or modification, but does not include executable exploit code.
Description
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.
Exploits (5)
The provided text describes SQL injection vulnerabilities in MaxWebPortal, specifically in the 'pics_popular.asp' file. It outlines how improper sanitization of user input can lead to data disclosure or modification, but does not include executable exploit code.
This exploit demonstrates SQL injection in MaxWebPortal by manipulating the 'Links_Popular.asp' parameter to extract admin credentials from the 'PORTAL_MEMBERS' table. The PoC uses a UNION-based attack to bypass authentication and retrieve sensitive data.
This exploit demonstrates a SQL injection vulnerability in MaxWebPortal by manipulating the 'dl_toprated.asp' parameter to extract admin credentials from the PORTAL_MEMBERS table. The attack leverages a UNION-based SQLi to bypass input sanitization.
This exploit demonstrates a SQL injection vulnerability in MaxWebPortal's Dl_Popular.asp page. It uses a UNION-based attack to extract admin credentials from the PORTAL_MEMBERS table.
The provided text describes SQL injection vulnerabilities in MaxWebPortal, specifically in the 'custom_link.asp' file with parameters 'TOPIC_ID' and 'Forum_ID'. It lacks executable exploit code but details the vulnerable endpoints and potential impacts.