CVE-2008-2767

2008-06-1822:00:00

mitre

www.cve.org

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.2%

JSON

SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter.

References

bugreport.ir/index.php?/41

marc.info/?l=bugtraq&m=121322052622903&w=2

securityreason.com/securityalert/3950

www.securityfocus.com/bid/29672

exchange.xforce.ibmcloud.com/vulnerabilities/43055