Skip to content
Noroxi

xigla records

37 published records for vendor xigla.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    37 records
    • CVE-2007-6269
      31Monitor

      Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQ

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute news manager.netDec 7, 2007

    • CVE-2008-6857
      31Monitor

      Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain v

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute podcast.netJul 14, 2009

    • CVE-2008-6854
      31Monitor

      Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a coo

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute faq manager .netJul 14, 2009

    • CVE-2008-6856
      31Monitor

      Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a co

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute news manager.netJul 14, 2009

    • CVE-2008-6860
      31Monitor

      Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a coo

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute poll manager xeJul 14, 2009

    • CVE-2008-6859
      31Monitor

      Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a co

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute control panel xeJul 14, 2009

    • CVE-2008-6864
      31Monitor

      Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a c

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute live support .netJul 14, 2009

    • CVE-2008-6863
      31Monitor

      Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute form processor.netJul 14, 2009

    • CVE-2008-6862
      31Monitor

      Absolute Content Rotator 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certai

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute content rotatorJul 14, 2009

    • CVE-2008-6861
      31Monitor

      Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute newsletterJul 14, 2009

    • CVE-2008-6858
      31Monitor

      Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a ce

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute banner manager.netJul 14, 2009

    • CVE-2008-6855
      31Monitor

      Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by se

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute news feedJul 14, 2009

    • CVE-2009-1504
      31Monitor

      Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin co

      HighCVSS 7.5Proof of conceptEPSS 2%

      xigla · absolute control panel xeMay 1, 2009

    • CVE-2007-1469
      30Monitor

      SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the c

      HighCVSS 7.5Proof of conceptEPSS 1%

      xigla · absolute image gallery xeMar 16, 2007

    • CVE-2008-2765
      30Monitor

      SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via

      HighCVSS 7.5No exploitEPSS 1%

      xigla · absolute image gallery xeJun 18, 2008

    • CVE-2007-6291
      30Monitor

      SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands

      HighCVSS 7.5No exploitEPSS 1%

      xigla · absolute banner manager.netDec 10, 2007

    • CVE-2008-4569
      30Monitor

      SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary S

      HighCVSS 7.5Proof of conceptEPSS 0%

      xigla · absolute poll manager xeOct 15, 2008

    • CVE-2008-2760
      26Monitor

      SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execu

      MediumCVSS 6.5No exploitEPSS 1%

      xigla · absolute banner managerJun 18, 2008

    • CVE-2008-2757
      26Monitor

      SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitr

      MediumCVSS 6.5No exploitEPSS 1%

      xigla · absolute news manager xeJun 18, 2008

    • CVE-2008-2763
      26Monitor

      SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitr

      MediumCVSS 6.5No exploitEPSS 0%

      xigla · absolute live support xeJun 18, 2008

    • CVE-2008-2762
      26Monitor

      SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbi

      MediumCVSS 6.5No exploitEPSS 0%

      xigla · absolute form processor xeJun 18, 2008

    • CVE-2008-2767
      26Monitor

      SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to e

      MediumCVSS 6.5No exploitEPSS 0%

      xigla · absolute poll manager xeJun 18, 2008

    • CVE-2007-6268
      23Monitor

      Directory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows remote attackers to read arbitrary files via

      MediumCVSS 5.0Proof of conceptEPSS 8%

      xigla · absolute news manager.netDec 7, 2007

    • CVE-2007-6271
      21Monitor

      Absolute News Manager.NET 5.1 allows remote attackers to obtain sensitive information via a direct request to getpath.aspx, which reveals th

      MediumCVSS 5.0Proof of conceptEPSS 2%

      xigla · absolute news manager.netDec 7, 2007

    • CVE-2007-6270
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script o

      MediumCVSS 4.3Proof of conceptEPSS 2%

      xigla · absolute news manager.netDec 7, 2007