← Database

CVE-2008-2767

MEDIUM CVSS: 6.5 Published: 2008-06-18 Modified: 2026-06-16

Description

SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter.

Affected Platforms

Xigla Absolute Poll Manager Xe

Weakness Type

CWE-89

References