CVE-2008-2759

The CVE-2008-2759 entry concerns the Xigla Absolute Form Processor XE 4.0, with multiple XSS vulnerabilities. The issue affects parameters in search.asp (showfields, text, submissions) and users.asp (name), enabling remote attackers to inject arbitrary web script or HTML. The description does not...

CVE-2008-2762

The CVE-2008-2762 entry describes a SQL injection in the search.asp component of Xigla Absolute Form Processor XE 4.0. The vulnerability allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter, indicating a server-side input handling flaw in the sear...