CVE-2008-2767 SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter.
MediumCVSS 6.5
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xigla absolute poll manager xe | All versions | No fix listed |
References
- bugreport.ir exploit
- 20080611 Xigla Multiple Products - Multiple Vulnerabilities exploit mailing-list
- 3950 third-party-advisory
- 29672 vdb-entry
- absolutepoll-search-sql-injection(43055) vdb-entry