CVE-2008-2763 SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
MediumCVSS 6.5
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xigla absolute live support xe | = 5.1 | No fix listed |
References
- bugreport.ir exploit
- 20080611 Xigla Multiple Products - Multiple Vulnerabilities exploit mailing-list
- 3950 third-party-advisory
- 29672 vdb-entry
- absolutelivesupport-search-sql-injection(43050) vdb-entry