Total
5 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2007-4630 | 1 Xigla | 1 Absolute Poll Manager Xe | 2018-10-15 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. | |||||
CVE-2008-6860 | 1 Xigla | 1 Absolute Poll Manager Xe | 2017-09-28 | 7.5 HIGH | N/A |
Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value. | |||||
CVE-2008-4569 | 1 Xigla | 1 Absolute Poll Manager Xe | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary SQL commands via the p parameter. | |||||
CVE-2008-2768 | 1 Xigla | 1 Absolute Poll Manager Xe | 2017-08-07 | 3.5 LOW | N/A |
Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to inject arbitrary web script or HTML via unspecified vectors ("all fields"). | |||||
CVE-2008-2767 | 1 Xigla | 1 Absolute Poll Manager Xe | 2017-08-07 | 6.5 MEDIUM | N/A |
SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter. |