Browse CVEs

HIGH 7.5 CVE-2008-6854 Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a … Absolute Faq Manager .net No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2008-6855 Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a c… Absolute News Feed No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2008-6856 Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a… Absolute News Manager.net No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2008-6857 Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value. Absolute Podcast.net No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2008-6858 Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain val… Absolute Banner Manager.net No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2008-6859 Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a… Absolute Control Panel Xe No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2008-6860 Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a … Absolute Poll Manager Xe No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2008-6861 Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to… Absolute Newsletter No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2008-6862 Absolute Content Rotator 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value. Absolute Content Rotator No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2008-6863 Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie t… Absolute Form Processor.net No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2008-6864 Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to … Absolute Live Support .net No fix yet Fix from $1,9502009-07-14 HIGH 7.5 CVE-2009-1504 Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "… Absolute Control Panel Xe No fix yet Fix from $1,9502009-05-01 HIGH 7.5 CVE-2008-4569 SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary SQL comman… Absolute Poll Manager Xe No fix yet Fix from $1,9502008-10-15 HIGH 7.5 CVE-2008-2765 SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categ… Absolute Image Gallery Xe No fix yet Fix from $1,9502008-06-18 MEDIUM 6.5 CVE-2008-2757 SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL c… Absolute News Manager Xe No fix yet Fix from $1,6002008-06-18 MEDIUM 6.5 CVE-2008-2760 SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitr… Absolute Banner Manager No fix yet Fix from $1,6002008-06-18 MEDIUM 6.5 CVE-2008-2762 SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL… Absolute Form Processor Xe No fix yet Fix from $1,6002008-06-18 MEDIUM 6.5 CVE-2008-2763 SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL c… Absolute Live Support Xe No fix yet Fix from $1,6002008-06-18 MEDIUM 6.5 CVE-2008-2767 SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute ar… Absolute Poll Manager Xe No fix yet Fix from $1,6002008-06-18 HIGH 7.5 CVE-2007-6291 SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z… Absolute Banner Manager.net Mitigation only Fix from $1,9502007-12-10 HIGH 7.5 CVE-2007-6269 Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL command… Absolute News Manager.net Patch available Fix from $1,9502007-12-07 MEDIUM 5.0 CVE-2007-6268EPSS 8% Directory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows remote attackers to read arbitrary files via a .. (do… Absolute News Manager.net Patch available Fix from $1,6002007-12-07 MEDIUM 5.0 CVE-2007-6271 Absolute News Manager.NET 5.1 allows remote attackers to obtain sensitive information via a direct request to getpath.aspx, which reveals the install… Absolute News Manager.net Patch available Fix from $1,6002007-12-07 HIGH 7.5 CVE-2007-1469 SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid… Absolute Image Gallery Xe No fix yet Fix from $1,9502007-03-16