CVE-2008-6859

Consolidated data from connected documents confirms CVE-2008-6859 affects Xigla Software Absolute Control Panel XE 1.5. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value. Exploitation is feasible over network wit...

CVE-2009-1504

CVE-2009-1504 affects Absolute Form Processor XE 1.5. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to “lvl=1&userid=1.” This is supported by NVD/NVD-derived details; CVSS metrics indicate network attack, low co...

CVE-2008-2756

CVE-2008-2756 is an XSS vulnerability in the admin/users.asp page of Xigla Absolute Control Panel XE 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via the name parameter (and other unspecified parameters). The available connected documents confirm the affected prod...