CVE-2008-2757

The CVE-2008-2757 entry affects Xigla Absolute News Manager XE 3.2. Affected component: search.asp. Root cause: SQL injection via the orderby parameter, enabling remote authenticated administrators to execute arbitrary SQL commands. Impact: allows manipulation of backend databases (as described),...

CVE-2008-2758

The CVE-2008-2758 entry concerns Xigla Absolute News Manager XE 3.2 with multiple XSS vulnerabilities . According to the records, remote authenticated administrators can inject arbitrary script or HTML via parameters in admin/search.asp (pblname, text), admin/publishers.asp (name), and other vect...