CVE-2008-2767
Xigla Absolute Poll Manager XE - Authenticated SQL Injection via search.asp orderby Parameter
Title source: llmDescription
SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter.
References (5)
Core 5
Core References
Exploit x_refsource_misc
http://bugreport.ir/index.php?/41
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/29672
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43055
Exploit mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=121322052622903&w=2
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/3950
Scores
EPSS
0.0099
EPSS Percentile
58.8%
Details
CWE
CWE-89
Status
published
Products (1)
xigla/absolute_poll_manager_xe
Published
Jun 18, 2008
Tracked Since
Feb 18, 2026