Maxwebportal

DATE	CVE	VULNERABILITY TITLE	RISK
2003-12-31	CVE-2003-1212	MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the (1) news, (2) lock, or (3) allmem fields in the 'start new topic' HTML page. network low complexity maxwebportal	7.5
2003-12-31	CVE-2003-1211	Cross-site scripting (XSS) vulnerability in search.asp for MaxWebPortal 1.30 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the Search parameter. network maxwebportal	6.8