CVE-2008-2763

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.

Software From Fixed in
xigla / absolute_live_support_xe 5.1 5.1.x

Details

    • Severity: Medium
  • CVE: CVE-2008-2763
  • Published: Jun 19, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs

OWASP TOP 10