CVE-2005-1779

This exploit targets MAX Portal by injecting SQL payloads to reset the admin password. It sends a crafted POST request to the password reset endpoint, leveraging SQL injection to change the admin password to 'trapset'.

This exploit leverages a SQL injection vulnerability in WebMaxPortal's password reset functionality to change the admin password. It provides two payloads tailored for different versions of the software.

This exploit demonstrates a SQL injection vulnerability in Maxwebportal versions 1.35, 1.36, 2.0, and 20050418 Next. The vulnerability allows an attacker to reset the password of any user, including the admin, by manipulating the 'memKey' parameter in the password reset form.