CVE-2004-0272

SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2004-11-23

Last modified

2024-08-08

Affected products

• Maxwebportal (Maxwebportal)

References

• http://marc.info/?l=bugtraq&m=107643014606515&w=2
• http://www.securityfocus.com/bid/9625
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15121