Unscored CVE-2008-2767 EUVD-2008-2760GHSA-jjpq-g68f-x6cx

SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to …

Published Jun 18, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter.

References

http://bugreport.ir/index.php?/41
29672 vdb-entry
absolutepoll-search-sql-injection(43055) vdb-entry
20080611 Xigla Multiple Products - Multiple Vulnerabilities mailing-list
3950 third-party-advisory