CVE-2008-2767

SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter...

absolute-screwups.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Xigla Multiple Products - Multiple Vulnerabilities Vendor: http://www.xigla.com/ Exploit: N/A Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/41 1. Description: Xigla company has several web based products From...

CVE-2007-6291

SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter...

Sql injection

SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter...

CVE-2007-6291

CVE-2007-6291 affects Xigla Absolute Banner Manager .NET 4.0. The vulnerability is a SQL injection in abm.aspx accessible via the z parameter, enabling remote attackers to execute arbitrary SQL commands. The entry is rated CVSS v2 base score 7.5 (HIGH) with network access and low complexity. Expl...

CVE-2007-6291

SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter...

xigla-sql.txt

HackerSafe Labs - Security Advisory http://www.hackersafelabs.com/ Date: 12/06/2007 Vendor: http://www.xigla.com Package: Xigla Absolute Banner Manager Versions: v4.0 Credit: Joseph Pierini - HackerSafe Labs Risk: Related Exploit Range: Remote Attack Complexity: Medium Level of Authentication...

PR07-23: Non-persistent Cross-site Scripting (XSS) on Absolute Poll Manager XE admin page

Date Found: 10th April 2007 Vendor informed: 4th July 2007 Successfully tested on: Absolute Poll Manager XE - Version 4.1. Earlier versions are possibly affected as well but have NOT been tested. Description: Absolute Poll Manager XE is vulnerable to a vanilla XSS within the...

aig-mssql.txt

Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug : http://localhost/script/gallery.asp?action=viewimage&categoryid=-SQL Inj-...

Absolute Image Gallery 2.0 (gallery.php categoryid) SQL Injection Vuln

No description provided by source. Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug :...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Screen name or 2 Session Topic field...

CVE-2006-1410

Multiple cross-site scripting XSS vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Screen name or 2 Session Topic field...

CVE-2006-1410

CVE-2006-1410 affects XIGLA Absolute Live Support XE 2.0 and earlier. The vulnerability is multiple XSS flaws that allow a remote attacker to inject arbitrary web script or HTML via the Screen name or Session Topic fields. The sources in the connected documents confirm the affected product/versio...

CVE-2006-1410

Multiple cross-site scripting XSS vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Screen name or 2 Session Topic field...