CVE-2008-6856

Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6860

Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Authentication flaw

Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6860

Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6854

Xigla Software Absolute FAQ Manager.NET 6.0 is affected by an authentication bypass vulnerability: remote attackers can gain administrative access by setting a specific cookie value. Root cause is improper cookie handling that bypasses login. Impact is unauthorized admin access; exact remediation...

CVE-2008-6855

The CVE-2008-6855 entry concerns Xigla Software Absolute News Feed 1.0 and possibly 1.5. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie. Impact is remote and includes potential administrative access , per the NVD entry...

CVE-2008-6859

Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6863

Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6861

The CVE-2008-6861 issue affects Xigla Software Absolute Newsletter (version 6.0 and 6.1). The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value, enabling partial confidentiality/integrity/availability impact as per the...

CVE-2008-6863

CVE-2008-6863 : Xigla Software Absolute Form Processor .NET 4.0 contains an authentication bypass. Remote attackers can gain administrative access by setting a specific cookie value. Impact is described as partial confidentiality, integrity, and availability with a CVSS v2 base score of 7.5 (HIGH...

CVE-2008-6854

Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6860

CVE-2008-6860 affects Xigla Software Absolute Poll Manager XE 4.1. The vulnerability is an authentication bypass: remote attackers can gain administrative access by setting a specific cookie value. This is documented across multiple sources (NVD/NVD duplicate entries, PRION, CVELIST). The provide...

CVE-2008-6855

Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie...

CVE-2008-6856

Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6864

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6856

The CVE-2008-6856 entry concerns Xigla Software Absolute News Manager.NET 5.1. According to the provided records, the vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value. The core issue is an authentication bypass via co...

CVE-2008-6861

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Absolute Control Panel XE 1.5 - Insecure Cookie Handling

Absolute Control Panel XE 1.5 - Insecure Cookie Handling | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Control Panel XE...

Sql injection

SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-4569

The CVE-2008-4569 entry concerns XIGLA Software Absolute Poll Manager XE 4.1. Affected component: xlacomments.asp (parameter: p). Underlying issue: SQL injection that could allow remote execution of arbitrary SQL commands. Documented impact indicates partial confidentiality, integrity, and availa...