← Database

CVE-2008-2757

MEDIUM CVSS: 6.5 Published: 2008-06-18 Modified: 2026-06-16

Description

SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.

Affected Platforms

Xigla Absolute News Manager Xe

Weakness Type

CWE-89

References