CVE-2008-2760

Impact

SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://bugreport.ir/index.php?/41
• http://marc.info/?l=bugtraq&m=121322052622903&w=2
• http://secunia.com/advisories/30641
• http://securityreason.com/securityalert/3950
• http://www.securityfocus.com/bid/29672
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43046
• http://bugreport.ir/index.php?/41
• http://marc.info/?l=bugtraq&m=121322052622903&w=2
• http://secunia.com/advisories/30641
• http://securityreason.com/securityalert/3950
• http://www.securityfocus.com/bid/29672
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43046