Lucene search
HistoryJun 18, 2008 - 10:41 p.m.
CVE-2008-2757
cve-2008-2757
sql injection
xigla absolute news manager xe
remote authenticated administrators
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.4%
SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
Affected configurations
Node
xiglaabsolute_news_manager_xeMatch3.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| xigla:absolute_news_manager_xe | xigla absolute news manager xe | eq | 3.2 |
Related
prion
prion
Sql injection
2008-06-18 22:41:00
cvelist
cvelist
CVE-2008-2757
2008-06-18 22:00:00
nvd
nvd
CVE-2008-2757
2008-06-18 22:41:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.4%
Related for CVE-2008-2757