CVE-2004-0271

MEDIUM 6.8CVE-2004-0271 · Published 23/11/2004 · updated 16/06/2026

In short

CVE-2004-0271 is a MEDIUM (CVSS 6.8) vulnerability affecting maxwebportal (maxwebportal).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
maxwebportal maxwebportal	`= 1.30= 1.31`	No fix yet

Description

Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form.

References

More vulnerabilities in maxwebportal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

maxwebportal

= 1.30= 1.31

No fix yet

Description

More vulnerabilities in maxwebportal

See all →