CVE-2008-2768 - Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to inject arbitrary web script or HTML via unspecified vectors ("all fields")

Back Back to CVE browser

LOW

Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to inject arbitrary web script or HTML via unspecified vectors ("all fields")

Published Jun 18, 2008

3.5

LOW

CVSS 2.0

EPSS 0.89%

Description

Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to inject arbitrary web script or HTML via unspecified vectors ("all fields").

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://bugreport.ir/index.php?/41
x_refsource_MISCExploit
http://marc.info/?l=bugtraq&m=121322052622903&w=2
mailing-listx_refsource_BUGTRAQExploit
http://securityreason.com/securityalert/3950
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/29672
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-2761
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43054
vdb-entryx_refsource_XF

Link	Providers	Tags
http://bugreport.ir/index.php?/41		x_refsource_MISCExploit
http://marc.info/?l=bugtraq&m=121322052622903&w=2		mailing-listx_refsource_BUGTRAQExploit
http://securityreason.com/securityalert/3950		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/29672		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-2761		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43054		vdb-entryx_refsource_XF