Записи xigla
37 опубликованных записей вендора xigla.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 5
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-287 Improper Authentication12
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')10
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
37 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
31Наблюдать | CVE-2007-6269Proof of concept | Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQxigla · absolute news manager.net · CWE-89 | Высокая7,5 | — | 2,8 % | 7 дек. 2007 г. |
31Наблюдать | CVE-2008-6857Proof of concept | Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain vxigla · absolute podcast.net · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2008-6854Proof of concept | Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cooxigla · absolute faq manager .net · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2008-6856Proof of concept | Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a coxigla · absolute news manager.net · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2008-6860Proof of concept | Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cooxigla · absolute poll manager xe · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2008-6859Proof of concept | Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a coxigla · absolute control panel xe · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2008-6864Proof of concept | Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cxigla · absolute live support .net · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2008-6863Proof of concept | Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting axigla · absolute form processor.net · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2008-6862Proof of concept | Absolute Content Rotator 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certaixigla · absolute content rotator · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2008-6861Proof of concept | Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a xigla · absolute newsletter · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2008-6858Proof of concept | Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a cexigla · absolute banner manager.net · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2008-6855Proof of concept | Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by sexigla · absolute news feed · CWE-287 | Высокая7,5 | — | 2,5 % | 14 июл. 2009 г. |
31Наблюдать | CVE-2009-1504Proof of concept | Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin coxigla · absolute control panel xe · CWE-287 | Высокая7,5 | — | 2,4 % | 1 мая 2009 г. |
30Наблюдать | CVE-2007-1469Proof of concept | SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the cxigla · absolute image gallery xe · CWE-89 | Высокая7,5 | — | 1,2 % | 16 мар. 2007 г. |
30Наблюдать | CVE-2008-2765Эксплойта нет | SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via xigla · absolute image gallery xe · CWE-89 | Высокая7,5 | — | 1,1 % | 18 июн. 2008 г. |
30Наблюдать | CVE-2007-6291Эксплойта нет | SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands xigla · absolute banner manager.net · CWE-89 | Высокая7,5 | — | 1,0 % | 10 дек. 2007 г. |
30Наблюдать | CVE-2008-4569Proof of concept | SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary Sxigla · absolute poll manager xe · CWE-89 | Высокая7,5 | — | 0,9 % | 15 окт. 2008 г. |
26Наблюдать | CVE-2008-2760Эксплойта нет | SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execuxigla · absolute banner manager · CWE-89 | Средняя6,5 | — | 1,1 % | 18 июн. 2008 г. |
26Наблюдать | CVE-2008-2757Эксплойта нет | SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrxigla · absolute news manager xe · CWE-89 | Средняя6,5 | — | 1,1 % | 18 июн. 2008 г. |
26Наблюдать | CVE-2008-2763Эксплойта нет | SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrxigla · absolute live support xe · CWE-89 | Средняя6,5 | — | 0,9 % | 18 июн. 2008 г. |
26Наблюдать | CVE-2008-2762Эксплойта нет | SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbixigla · absolute form processor xe · CWE-89 | Средняя6,5 | — | 0,9 % | 18 июн. 2008 г. |
26Наблюдать | CVE-2008-2767Эксплойта нет | SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to exigla · absolute poll manager xe · CWE-89 | Средняя6,5 | — | 0,9 % | 18 июн. 2008 г. |
23Наблюдать | CVE-2007-6268Proof of concept | Directory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows remote attackers to read arbitrary files viaxigla · absolute news manager.net · CWE-22 | Средняя5,0 | — | 8,4 % | 7 дек. 2007 г. |
21Наблюдать | CVE-2007-6271Proof of concept | Absolute News Manager.NET 5.1 allows remote attackers to obtain sensitive information via a direct request to getpath.aspx, which reveals thxigla · absolute news manager.net · CWE-20 | Средняя5,0 | — | 2,6 % | 7 дек. 2007 г. |
18Наблюдать | CVE-2007-6270Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script oxigla · absolute news manager.net · CWE-79 | Средняя4,3 | — | 2,3 % | 7 дек. 2007 г. |
- CVE-2007-626931Наблюдать
Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQ
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute news manager.net7 дек. 2007 г.
- CVE-2008-685731Наблюдать
Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain v
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute podcast.net14 июл. 2009 г.
- CVE-2008-685431Наблюдать
Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a coo
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute faq manager .net14 июл. 2009 г.
- CVE-2008-685631Наблюдать
Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a co
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute news manager.net14 июл. 2009 г.
- CVE-2008-686031Наблюдать
Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a coo
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute poll manager xe14 июл. 2009 г.
- CVE-2008-685931Наблюдать
Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a co
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute control panel xe14 июл. 2009 г.
- CVE-2008-686431Наблюдать
Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a c
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute live support .net14 июл. 2009 г.
- CVE-2008-686331Наблюдать
Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute form processor.net14 июл. 2009 г.
- CVE-2008-686231Наблюдать
Absolute Content Rotator 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certai
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute content rotator14 июл. 2009 г.
- CVE-2008-686131Наблюдать
Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute newsletter14 июл. 2009 г.
- CVE-2008-685831Наблюдать
Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a ce
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute banner manager.net14 июл. 2009 г.
- CVE-2008-685531Наблюдать
Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by se
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute news feed14 июл. 2009 г.
- CVE-2009-150431Наблюдать
Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin co
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %xigla · absolute control panel xe1 мая 2009 г.
- CVE-2007-146930Наблюдать
SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the c
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %xigla · absolute image gallery xe16 мар. 2007 г.
- CVE-2008-276530Наблюдать
SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %xigla · absolute image gallery xe18 июн. 2008 г.
- CVE-2007-629130Наблюдать
SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %xigla · absolute banner manager.net10 дек. 2007 г.
- CVE-2008-456930Наблюдать
SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary S
ВысокаяCVSS 7,5Proof of conceptEPSS 0 %xigla · absolute poll manager xe15 окт. 2008 г.
- CVE-2008-276026Наблюдать
SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execu
СредняяCVSS 6,5Эксплойта нетEPSS 1 %xigla · absolute banner manager18 июн. 2008 г.
- CVE-2008-275726Наблюдать
SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitr
СредняяCVSS 6,5Эксплойта нетEPSS 1 %xigla · absolute news manager xe18 июн. 2008 г.
- CVE-2008-276326Наблюдать
SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitr
СредняяCVSS 6,5Эксплойта нетEPSS 0 %xigla · absolute live support xe18 июн. 2008 г.
- CVE-2008-276226Наблюдать
SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbi
СредняяCVSS 6,5Эксплойта нетEPSS 0 %xigla · absolute form processor xe18 июн. 2008 г.
- CVE-2008-276726Наблюдать
SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to e
СредняяCVSS 6,5Эксплойта нетEPSS 0 %xigla · absolute poll manager xe18 июн. 2008 г.
- CVE-2007-626823Наблюдать
Directory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows remote attackers to read arbitrary files via
СредняяCVSS 5,0Proof of conceptEPSS 8 %xigla · absolute news manager.net7 дек. 2007 г.
- CVE-2007-627121Наблюдать
Absolute News Manager.NET 5.1 allows remote attackers to obtain sensitive information via a direct request to getpath.aspx, which reveals th
СредняяCVSS 5,0Proof of conceptEPSS 2 %xigla · absolute news manager.net7 дек. 2007 г.
- CVE-2007-627018Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script o
СредняяCVSS 4,3Proof of conceptEPSS 2 %xigla · absolute news manager.net7 дек. 2007 г.