CVE-2008-2760 SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
MediumCVSS 6.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xigla absolute banner manager | = 2.0 | No fix listed |
References
- bugreport.ir exploit
- 20080611 Xigla Multiple Products - Multiple Vulnerabilities exploit mailing-list
- 30641 third-party-advisory vendor-advisory
- 3950 third-party-advisory
- 29672 vdb-entry
- absolutebanner-searchbanners-sql-injection(43046) vdb-entry