CVEvulnerability
CVE-2008-2761
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2008-06-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Banner Manager XE 2.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the text parameter in (1) searchbanners.asp and (2) listadvertisers.asp, and other unspecified fields. NOTE: some of these details are obtained from third party information.
Affected configurations
• xigla absolute banner manager 2.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://bugreport.ir/index.php?/41 Exploit
- http://marc.info/?l=bugtraq&m=121322052622903&w=2 Exploit
- http://secunia.com/advisories/30641 Vendor Advisory
- http://securityreason.com/securityalert/3950 securityreason.com
- http://www.securityfocus.com/bid/29672 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43045 exchange.xforce.ibmcloud.com
- http://bugreport.ir/index.php?/41 Exploit
- http://marc.info/?l=bugtraq&m=121322052622903&w=2 Exploit
- http://secunia.com/advisories/30641 Vendor Advisory
- http://securityreason.com/securityalert/3950 securityreason.com
- http://www.securityfocus.com/bid/29672 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43045 exchange.xforce.ibmcloud.com