Absolute Form Processor XE-V 1.5 Password Changer

Absolute Form Processor XE-V 1.5 Remote Change Pasword Home:http://www.xigla.com E-mail : Username : Password : input type="password" name="pwd" size="40" value...

Absolute Form Processor XE-V 1.5 - Authentication Bypass

----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...

Absolute Form Processor XE-V 1.5 (Auth Bypass) SQL Injection Vuln

Exploit for asp platform in category web applications ================================================================= Absolute Form Processor XE-V 1.5 Auth Bypass SQL Injection Vuln =================================================================...

Absolute Form Processor XE 1.5 - login.asp SQL Injection

Absolute Form Processor XE 1.5 - login.asp SQL Injection source: https://www.securityfocus.com/bid/34463/info Absolute Form Processor XE is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Absolute Form Processor SQL Injection

----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...

Absolute Form Processor 4.0 Insecure Cookie Handling Vulnerability

No description provided by source. | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Form Processor see script...

Absolute Form Processor 4.0 - Insecure Cookie Handling

Absolute Form Processor 4.0 - Insecure Cookie Handling | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Form Processor see script...

Absolute Form Processor 4.0 - Insecure Cookie Handling

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Form Processor see script http://www.xigla.com/absolutefpnet/demo.htm Team : EgY...

Absolute Form Processor 4.0 Insecure Cookie Handling Vulnerability

Exploit for asp platform in category web applications ================================================================== Absolute Form Processor 4.0 Insecure Cookie Handling Vulnerability ================================================================== Author : Hakxer Type Gap : Insecure Cookie...

absoluteform-cookie.txt

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Form Processor see script http://www.xigla.com/absolutefpnet/demo.htm Team : EgY...

Sql injection

SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...

CVE-2008-2759

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...

CVE-2008-2759

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...

CVE-2008-2759

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...

CVE-2008-2759

The CVE-2008-2759 entry concerns the Xigla Absolute Form Processor XE 4.0, with multiple XSS vulnerabilities. The issue affects parameters in search.asp (showfields, text, submissions) and users.asp (name), enabling remote attackers to inject arbitrary web script or HTML. The description does not...

CVE-2008-2762

The CVE-2008-2762 entry describes a SQL injection in the search.asp component of Xigla Absolute Form Processor XE 4.0. The vulnerability allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter, indicating a server-side input handling flaw in the sear...

absolute-screwups.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Xigla Multiple Products - Multiple Vulnerabilities Vendor: http://www.xigla.com/ Exploit: N/A Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/41 1. Description: Xigla company has several web based products From...