PT-2003-2160 · Maxwebportal · Maxwebportal

Published 2003-12-31 · Updated 2017-07-11 · CVE-2003-1212

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MaxWebPortal version 1.30

Description The issue allows remote attackers to perform unauthorized actions by modifying hidden form fields in the 'start new topic' HTML page, specifically the news, lock, or allmem fields.

Recommendations For MaxWebPortal version 1.30, consider restricting access to the 'start new topic' HTML page or validating user input to prevent modification of hidden form fields until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2003-1212

Affected Products

Maxwebportal

References · 6

• 🔥 http://secunia.com/advisories/8979 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2003-1212 · Security Note
• http://securityfocus.com/bid/7837 · Patch
• http://osvdb.org/4933 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12278 · Note