absolute_news_manager_xe Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/absolute_news_manager_xe/ Sun, 26 Feb 2023 09:09:40 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png absolute_news_manager_xe Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/absolute_news_manager_xe/ 32 32 CVE-2008-2757 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2757/ Sun, 26 Feb 2023 09:09:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2757/ SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.

The post CVE-2008-2757 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.

The post CVE-2008-2757 appeared first on CVE Vulnerability.

]]> CVE-2008-2758 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2758/ Sun, 26 Feb 2023 09:09:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2758/ Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute News Manager XE 3.2 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) pblname and (2) text parameters to (a) admin/search.asp, (3) name parameter to (b) admin/publishers.asp, and other unspecified vectors to (c) anmviewer.asp and (d) editarticleX.asp in admin/. NOTE: some of […]

The post CVE-2008-2758 appeared first on CVE Vulnerability.

]]> Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute News Manager XE 3.2 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) pblname and (2) text parameters to (a) admin/search.asp, (3) name parameter to (b) admin/publishers.asp, and other unspecified vectors to (c) anmviewer.asp and (d) editarticleX.asp in admin/. NOTE: some of these details are obtained from third party information.

The post CVE-2008-2758 appeared first on CVE Vulnerability.

]]>