medium6.5
CVE-2008-2757
SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands vi…
Impact
SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xigla | Absolute News Manager Xe | Version 3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugreport.ir/index.php?/41
- http://marc.info/?l=bugtraq&m=121322052622903&w=2
- http://secunia.com/advisories/30643
- http://securityreason.com/securityalert/3950
- http://www.securityfocus.com/bid/29672
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43043
- http://bugreport.ir/index.php?/41
- http://marc.info/?l=bugtraq&m=121322052622903&w=2
- http://secunia.com/advisories/30643
- http://securityreason.com/securityalert/3950
- http://www.securityfocus.com/bid/29672
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43043