CVE-2005-1562

Multiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fpassword parameter to inc_functions.asp, (2) txtAddress, (3) message, or (4) subject parameter to post_info.asp, (5) andor parameter to search.asp, (6) verkey parameter to pop_profile.asp, or (7) Remove or (8) Delete parameter to pm_delete2.asp.

• http://marc.info/?l=bugtraq&m=111584883727605&w=2
• http://secunia.com/advisories/15329Patch, Vendor Advisory
• http://www.hackerscenter.com/archive/view.asp?id=2542Exploit, Vendor Advisory
• http://www.osvdb.org/16502
• http://www.osvdb.org/16503
• http://www.osvdb.org/16504
• http://www.osvdb.org/16506
• http://www.osvdb.org/16510
• http://www.securityfocus.com/bid/13601Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20562
• http://marc.info/?l=bugtraq&m=111584883727605&w=2
• http://secunia.com/advisories/15329Patch, Vendor Advisory
• http://www.hackerscenter.com/archive/view.asp?id=2542Exploit, Vendor Advisory
• http://www.osvdb.org/16502
• http://www.osvdb.org/16503
• http://www.osvdb.org/16504
• http://www.osvdb.org/16506
• http://www.osvdb.org/16510
• http://www.securityfocus.com/bid/13601Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20562

Published

May 11, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-1556Gamespy cd-key validation system allows remote attackers to …
• CVE-2005-1557Multiple cross-site scripting (XSS) vulnerabilities in WebAp…
• CVE-2005-1558The web module in Neteyes Nexusway allows remote attackers t…
• CVE-2005-1559The web module in Neteyes Nexusway allows remote attackers t…
• CVE-2005-1560The SSH module in Neteyes Nexusway allows remote attackers t…
• CVE-2005-1561Multiple cross-site scripting (XSS) vulnerabilities in post.…
• CVE-2005-1563Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a di…
• CVE-2005-1564post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19…
• CVE-2005-1565Bugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a use…
• CVE-2005-1566Acrowave AAP-3100AR wireless router allows remote attackers …
• CVE-2005-1567SQL injection vulnerability in topic.php in DirectTopics 2.1…
• CVE-2005-1568topic.php in DirectTopics 2.1 and 2.2 allows remote attacker…