Lucene search

K
cve[email protected]CVE-2008-2760
HistoryJun 18, 2008 - 10:41 p.m.

CVE-2008-2760

2008-06-1822:41:00
CWE-89
web.nvd.nist.gov
19
cve-2008-2760
sql injection
xigla absolute banner manager xe 2.0
nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.4%

SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.

Affected configurations

NVD
Node
xiglaabsolute_banner_managerMatch2.0asp

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.4%

Related for CVE-2008-2760