← Database

CVE-2008-2762

MEDIUM CVSS: 6.5 Published: 2008-06-18 Modified: 2026-06-16

Description

SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.

Affected Platforms

Xigla Absolute Form Processor Xe

Weakness Type

CWE-89

References