https://www.exploit-db.com/exploits/22747
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200312-321

MaxWebPortal1.30版本的默认安装将门户网站数据库存储在具有不安全访问控制权限的web文档根下，远程攻击者借助database/db2000.mdb的直接请求获取敏感信息。

source: http://www.securityfocus.com/bid/7837/info
 
A number of vulnerabilities have been discovered in the MaxWebPortal.
 
The issues that have been discovered include:
 
MaxWebPortal 'search.asp' has been reported prone to a cross-site scripting vulnerability. An attacker may execute arbitrary script code in the security context of the system running MaxWebPortal.
 
MaxWebPortal has been reported prone to insecure hidden form field vulnerability. An attacker may save the 'start new topic' page offline. By modifying certain field values, the attacker may corrupt the MaxWebPortal contents.
 
MaxWebPortal has also been reported prone to insecure session cookie vulnerability. Reportedly if an attacker can retrieve a session cookie for a legitimate MaxWebPortal user, the attacker may hijack the account.
 
MaxWebPortal has been reported prone to a database disclosure vulnerability. MaxWebPortal does not sufficiently secure the database file. It is possible for remote attackers to request the database file and gain access to sensitive information.
 
MaxWebPortal 'password.asp' has been reported prone to a password-reset vulnerability. It has been reported that by requesting a forgotten password, an attacker may save the 'password reset' page offline. By modifying the member id in the script the attacker may reset arbitrary account passwords. 

http://www.example.com/database/db2000.mdb

来源:BID
名称:7837
链接:http://www.securityfocus.com/bid/7837
来源:BUGTRAQ
名称:20030606CriticalVulnerabilitiesInMaxWebPortal
链接:http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html
来源:XF
名称:maxwebportal-database-access(12279)
链接:http://xforce.iss.net/xforce/xfdb/12279
来源:SECUNIA
名称:8979
链接:http://secunia.com/advisories/8979