CVE:CVE-2005-1017
CNNVD:CNNVD-200505-775
MaxWebPortal 1.33及更早版本中的events_functions.asp的Update_Events函数存在SQL注入漏洞，远程攻击者可以通过EVENT_ID参数来执行任意SQL命令。如使用events.asp。
solution:Upgrade maxwebportal maxwebportal to a higher version than 1.33,and avoid the version (,1.33]