MaxWebPortal is vulnerable to a cross site scripting and SQL injection attack.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32660/maxwebportal.txt
Source: https://packetstormsecurity.com/files/32660/maxwebportal.txt.html