CVE:CVE-2005-1779
CNNVD:CNNVD-200505-1249
MaxWebPortal 1.35、1.36、2.0和20050418 Next 中的password.asp存在SQL注入漏洞，远程攻击者可以通过memKey参数来执行任意SQL命令。
solution:Upgrade maxwebportal maxwebportal to a higher version than 1.35,1.36,2.0,2005-04-18,and avoid the version 1.35,1.36,2.0,2005-04-18