CVE-2005-1016: Cross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier allows rem...

Security readout for executives and security teams

CVE-2005-1016 is a cross-site scripting issue in MaxWebPortal 1.33 and earlier. A remote attacker could cause attacker-controlled script or HTML to be stored or displayed through the banner URL field. Business risk depends on whether this legacy portal is still internet-facing and used by authenticated staff or customers. Exposure is most likely in legacy deployments of MaxWebPortal 1.33 or earlier, especially if links_add_form.asp is reachable by untrusted users or accepts link/banner submissions. Treat as a targeted legacy-application cleanup item. Prioritize quickly if MaxWebPortal is internet-facing or supports authenticated users; otherwise track through normal vulnerability management because source evidence lacks severity scoring and exploitation confirmation. Mitigation focus: Inventory any MaxWebPortal deployments and confirm versions.; Check vendor or archived advisory guidance for fixed MaxWebPortal releases.; Restrict public access to links_add_form.asp if the feature is unnecessary..

Prepared

Jun 29, 2026, 22:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.