CVEvulnerability
CVE-2007-6269
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.
Affected configurations
• xigla absolute news manager.net 5.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://marc.info/?l=bugtraq&m=119678724111351&w=2 marc.info
- http://osvdb.org/40576 osvdb.org
- http://secunia.com/advisories/27923 Vendor Advisory
- http://www.procheckup.com/Vulnerability_PR07-39.php www.procheckup.com
- http://www.securityfocus.com/bid/26692 Exploit, Patch
- http://www.xigla.com/news/default.aspx www.xigla.com
- http://www.xigla.com/security/ANMNET51-SecurityUpdate20071128.zip www.xigla.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38871 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=119678724111351&w=2 marc.info
- http://osvdb.org/40576 osvdb.org
- http://secunia.com/advisories/27923 Vendor Advisory
- http://www.procheckup.com/Vulnerability_PR07-39.php www.procheckup.com
- http://www.securityfocus.com/bid/26692 Exploit, Patch
- http://www.xigla.com/news/default.aspx www.xigla.com
- http://www.xigla.com/security/ANMNET51-SecurityUpdate20071128.zip www.xigla.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38871 exchange.xforce.ibmcloud.com