CVE-2008-4569: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary SQL commands via the p parameter...

Absolute Poll Manager XE 4.1 - xlacomments.asp SQL Injection

Absolute Poll Manager XE 4.1 - xlacomments.asp SQL Injection Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx ,...

Absolute Poll Manager XE 4.1 (xlacomments.asp) SQL Injection Vuln

No description provided by source. Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 T...

Joomla! Component Xe webtv - id Blind SQL Injection

Joomla! Component Xe webtv - id Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component Xe webtv Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " \n"; print " Conctact:...

Joomla Component Xe webtv (id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Joomla Component Xe webtv id Blind SQL Injection Exploit ========================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1...

Joomla! Component Xe webtv - 'id' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component Xe webtv Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " \n"; print " Conctact: His0k4.hlmatgamil.com \n"; print " Greetz: All friends & muslims...

CVE-2008-2759

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute News Manager XE 3.2 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 pblname and 2 text parameters to a admin/search.asp, 3 name parameter to b admin/publishers.asp, and other unspecified...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...

Sql injection

SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

CVE-2008-2759

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...

CVE-2008-2768

Cross-site scripting XSS vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to inject arbitrary web script or HTML via unspecified vectors "all fields"...

CVE-2008-2765

SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

CVE-2008-2758

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute News Manager XE 3.2 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 pblname and 2 text parameters to a admin/search.asp, 3 name parameter to b admin/publishers.asp, and other unspecified...

CVE-2008-2766

The CVE-2008-2766 entry concerns Xigla Absolute Image Gallery XE, with a cross-site scripting (XSS) vulnerability affecting the admin/search.asp and gallery.asp endpoints. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The provided documents iden...

CVE-2008-2760

CVE-2008-2760 describes an SQL injection vulnerability in searchbanners.asp of Xigla Absolute Banner Manager XE 2.0 . The issue allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter, indicating improper validation of user-supplied input in the scri...

CVE-2008-2768

The CVE-2008-2768 entry concerns a Cross-site scripting (XSS) vulnerability in admin/search.asp of Xigla Poll Manager XE. The issue allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified vectors described as “all fields.” The provide...

CVE-2008-2757

SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2008-2757

The CVE-2008-2757 entry affects Xigla Absolute News Manager XE 3.2. Affected component: search.asp. Root cause: SQL injection via the orderby parameter, enabling remote authenticated administrators to execute arbitrary SQL commands. Impact: allows manipulation of backend databases (as described),...

CVE-2008-2761

CVE-2008-2761 describes multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Banner Manager XE 2.0 . The flaws allow remote authenticated administrators to inject arbitrary web script or HTML via the text parameter in searchbanners.asp , listadvertisers.asp , and other unspecifie...