CVEvulnerability
CVE-2008-2759
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information.
Affected configurations
• xigla absolute form processor xe 4.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://bugreport.ir/index.php?/41 Exploit
- http://marc.info/?l=bugtraq&m=121322052622903&w=2 Exploit
- http://secunia.com/advisories/30640 Vendor Advisory
- http://securityreason.com/securityalert/3950 securityreason.com
- http://www.securityfocus.com/bid/29672 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43047 exchange.xforce.ibmcloud.com
- http://bugreport.ir/index.php?/41 Exploit
- http://marc.info/?l=bugtraq&m=121322052622903&w=2 Exploit
- http://secunia.com/advisories/30640 Vendor Advisory
- http://securityreason.com/securityalert/3950 securityreason.com
- http://www.securityfocus.com/bid/29672 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43047 exchange.xforce.ibmcloud.com