EUVD-2008-4550

Malware in sbrugna...

EUVD-2007-4612

Malware in sbrugna...

Absolute Poll Manager XE 4.1 xlaapmview.asp Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25492/info Absolute Poll Manager XE is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site...

Authentication flaw

Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6860

CVE-2008-6860 affects Xigla Software Absolute Poll Manager XE 4.1. The vulnerability is an authentication bypass: remote attackers can gain administrative access by setting a specific cookie value. This is documented across multiple sources (NVD/NVD duplicate entries, PRION, CVELIST). The provide...

Absolute Poll Manager XE 4.1 Cookie Handling Vulnerability

No description provided by source. | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absolute Poll Manager XE v 4.1 see script...

absolutepoll-cookie.txt

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absolute Poll Manager XE v 4.1 see script http://www.xigla.com/absolutepm/demo.htm...

Absolute Poll Manager XE 4.1 - Insecure Cookie Handling

Absolute Poll Manager XE 4.1 - Insecure Cookie Handling | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absolute Poll Manager XE v...

Absolute Poll Manager XE 4.1 - Insecure Cookie Handling

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absolute Poll Manager XE v 4.1 see script http://www.xigla.com/absolutepm/demo.htm...

Absolute Poll Manager XE 4.1 Cookie Handling Vulnerability

Exploit for asp platform in category web applications ========================================================== Absolute Poll Manager XE 4.1 Cookie Handling Vulnerability ========================================================== | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | ...

Sql injection

SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-4569

The CVE-2008-4569 entry concerns XIGLA Software Absolute Poll Manager XE 4.1. Affected component: xlacomments.asp (parameter: p). Underlying issue: SQL injection that could allow remote execution of arbitrary SQL commands. Documented impact indicates partial confidentiality, integrity, and availa...

Absolute Poll Manager XE 4.1 (xlacomments.php) SQL Injection Vulnerability

No description provided by source. Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 T...

apm-sql.txt

Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 TM : EgY Coders POC...

Absolute Poll Manager XE 4.1 - 'xlacomments.asp' SQL Injection

Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 TM : EgY Coders POC...

Absolute Poll Manager XE 4.1 - xlacomments.asp SQL Injection

Absolute Poll Manager XE 4.1 - xlacomments.asp SQL Injection Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx ,...

Absolute Poll Manager XE 4.1 (xlacomments.asp) SQL Injection Vuln

Exploit for asp platform in category web applications ================================================================= Absolute Poll Manager XE 4.1 xlacomments.asp SQL Injection Vuln ================================================================= Author : Hakxer Type Gap : Sql injection --MSSQ...

Absolute Poll Manager XE 4.1 (xlacomments.asp) SQL Injection Vuln

No description provided by source. Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 T...

absolute-screwups.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Xigla Multiple Products - Multiple Vulnerabilities Vendor: http://www.xigla.com/ Exploit: N/A Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/41 1. Description: Xigla company has several web based products From...

Cross site scripting

Cross-site scripting XSS vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...