CVE-2008-2762 SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
MediumCVSS 6.5
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xigla absolute form processor xe | = 4.0 | No fix listed |
References
- bugreport.ir exploit
- 20080611 Xigla Multiple Products - Multiple Vulnerabilities exploit mailing-list
- 3950 third-party-advisory
- 29672 vdb-entry
- absoluteform-search-sql-injection(43051) vdb-entry