EUVD-2007-4612

Malware in sbrugna...

EUVD-2008-4550

Malware in sbrugna...

Absolute Poll Manager XE 4.1 xlaapmview.asp Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25492/info Absolute Poll Manager XE is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site...

Authentication flaw

Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6860

CVE-2008-6860 affects Xigla Software Absolute Poll Manager XE 4.1. The vulnerability is an authentication bypass: remote attackers can gain administrative access by setting a specific cookie value. This is documented across multiple sources (NVD/NVD duplicate entries, PRION, CVELIST). The provide...

absolutepoll-cookie.txt

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absolute Poll Manager XE v 4.1 see script http://www.xigla.com/absolutepm/demo.htm...

Absolute Poll Manager XE 4.1 Cookie Handling Vulnerability

No description provided by source. | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absolute Poll Manager XE v 4.1 see script...

Absolute Poll Manager XE 4.1 - Insecure Cookie Handling

Absolute Poll Manager XE 4.1 - Insecure Cookie Handling | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absolute Poll Manager XE v...

Absolute Poll Manager XE 4.1 - Insecure Cookie Handling

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absolute Poll Manager XE v 4.1 see script http://www.xigla.com/absolutepm/demo.htm...

Absolute Poll Manager XE 4.1 Cookie Handling Vulnerability

Exploit for asp platform in category web applications ========================================================== Absolute Poll Manager XE 4.1 Cookie Handling Vulnerability ========================================================== | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | ...

Sql injection

SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-4569

The CVE-2008-4569 entry concerns XIGLA Software Absolute Poll Manager XE 4.1. Affected component: xlacomments.asp (parameter: p). Underlying issue: SQL injection that could allow remote execution of arbitrary SQL commands. Documented impact indicates partial confidentiality, integrity, and availa...

apm-sql.txt

Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 TM : EgY Coders POC...

Absolute Poll Manager XE 4.1 (xlacomments.php) SQL Injection Vulnerability

No description provided by source. Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 T...

Absolute Poll Manager XE 4.1 (xlacomments.asp) SQL Injection Vuln

No description provided by source. Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 T...

Absolute Poll Manager XE 4.1 (xlacomments.asp) SQL Injection Vuln

Exploit for asp platform in category web applications ================================================================= Absolute Poll Manager XE 4.1 xlacomments.asp SQL Injection Vuln ================================================================= Author : Hakxer Type Gap : Sql injection --MSSQ...

Absolute Poll Manager XE 4.1 - xlacomments.asp SQL Injection

Absolute Poll Manager XE 4.1 - xlacomments.asp SQL Injection Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx ,...

Absolute Poll Manager XE 4.1 - 'xlacomments.asp' SQL Injection

Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 TM : EgY Coders POC...

absolute-screwups.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Xigla Multiple Products - Multiple Vulnerabilities Vendor: http://www.xigla.com/ Exploit: N/A Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/41 1. Description: Xigla company has several web based products From...

Cross site scripting

Cross-site scripting XSS vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...