CVE-2008-2761

CVE-2008-2761 describes multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Banner Manager XE 2.0 . The flaws allow remote authenticated administrators to inject arbitrary web script or HTML via the text parameter in searchbanners.asp , listadvertisers.asp , and other unspecifie...

CVE-2008-2760

CVE-2008-2760 describes an SQL injection vulnerability in searchbanners.asp of Xigla Absolute Banner Manager XE 2.0 . The issue allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter, indicating improper validation of user-supplied input in the scri...

absolute-screwups.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Xigla Multiple Products - Multiple Vulnerabilities Vendor: http://www.xigla.com/ Exploit: N/A Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/41 1. Description: Xigla company has several web based products From...