CVE-2005-1779: Maxwebportal

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter.

Affected products

• Maxwebportal Maxwebportal: version 1.35 only; version 1.36 only; version 2.0 only; version 2005-04-18 only

Published 2005-05-31. Last modified 2026-06-16.