Описание
SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2008-2757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43043
- http://bugreport.ir/index.php?/41
- http://marc.info/?l=bugtraq&m=121322052622903&w=2
- http://secunia.com/advisories/30643
- http://securityreason.com/securityalert/3950
- http://www.securityfocus.com/bid/29672
Связанные уязвимости
nvd
больше 17 лет назад
SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.