Description
SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter.
References
- 27958 third-party-advisory
- 20071206 HackerSafe Labs - Security Advisory - Xigla Absolute Banner Manager v4.0 mailing-list
- absolutebannermanager-abm-sql-injection(38921) vdb-entry
- 26754 vdb-entry