Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
xigla vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2008-6861
Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote malicious users to bypass authentication and gain administrative access by setting a cookie to a certain value.
Xigla Absolute Newsletter 6.0
Xigla Absolute Newsletter 6.1
1 EDB exploit
7.5
CVSSv2
CVE-2008-6855
Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote malicious users to bypass authentication and gain administrative access by setting a certain cookie.
Xigla Absolute News Feed 1.0
Xigla Absolute News Feed 1.5
1 EDB exploit
7.5
CVSSv2
CVE-2008-6857
Absolute Podcast .NET 1.0 allows remote malicious users to bypass authentication and gain administrative access by setting a cookie to a certain value.
Xigla Absolute Podcast.net 1.0
1 EDB exploit
5
CVSSv2
CVE-2007-6268
Directory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows remote malicious users to read arbitrary files via a .. (dot dot) in the template parameter.
Xigla Absolute News Manager.net 5.1
1 EDB exploit
7.5
CVSSv2
CVE-2008-2765
SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote malicious users to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.
Xigla Absolute Image Gallery Xe
4.3
CVSSv2
CVE-2008-2766
Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors in (1) admin/search.asp and (2) gallery.asp.
Xigla Absolute Image Gallery Xe
6.5
CVSSv2
CVE-2008-2767
SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter.
Xigla Absolute Poll Manager Xe
7.5
CVSSv2
CVE-2008-6862
Absolute Content Rotator 6.0 allows remote malicious users to bypass authentication and gain administrative access by setting a cookie to a certain value.
Xigla Absolute Content Rotator 6.0
1 EDB exploit
7.5
CVSSv2
CVE-2008-6863
Xigla Software Absolute Form Processor .NET 4.0 allows remote malicious users to bypass authentication and gain administrative access by setting a cookie to a certain value.
Xigla Absolute Form Processor.net 4.0
1 EDB exploit
7.5
CVSSv2
CVE-2007-6269
Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote malicious users to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.
Xigla Absolute News Manager.net 5.1
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040
privilege escalation
CVE-2024-4112
CVE-2024-32872
man-in-the-middle
CVE-2024-32788
bypass
CVE-2024-3400
CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »