CVE-2008-2759

Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information.

Link	Resource
http://marc.info/?l=bugtraq&m=121322052622903&w=2	Exploit
http://bugreport.ir/index.php?/41	Exploit
http://www.securityfocus.com/bid/29672
http://secunia.com/advisories/30640	Vendor Advisory
http://securityreason.com/securityalert/3950
https://exchange.xforce.ibmcloud.com/vulnerabilities/43047

Configuration 1

cpe:2.3:a:xigla:absolute_form_processor_xe:4.0:*:*:*:*:*:*:*

---

Published : 2008-06-18 10:41

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-2759

Mitre link : CVE-2008-2759

Absolute Form Processor Xe

Xigla

CWE-79