← Database

CVE-2004-0272

HIGH CVSS: 7.5 Published: 2004-11-23 Modified: 2026-06-16

Description

SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages.

Affected Platforms

Maxwebportal Maxwebportal

Weakness Type

NVD-CWE-Other

References