Xigla

Records37All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

Xigla records in CISA KEV

No Xigla vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Absolute Image Gallery Xe 5 records LOW Absolute News Manager.net 5 records LOW Absolute Poll Manager Xe 5 records LOW Absolute Control Panel Xe 3 records LOW Absolute Live Support Xe 3 records LOW Absolute Banner Manager 2 records LOW Absolute Banner Manager.net 2 records LOW Absolute Faq Manager .net 2 records LOW

Records

5 records in Absolute Image Gallery Xe · all components

TI-2008-02640 CVE-2008-2765 · GHSA-4m8c-6ghq-qm6f

SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows…

LOW 35

SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01192 Published 2008-06-18 No fix listed CWE-89

TI-2007-01411 CVE-2007-1469 · GHSA-h3wp-82m4-rpj4

SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote…

LOW 35

SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01226 Published 2007-03-16 No fix listed CWE-89

TI-2008-02641 CVE-2008-2766 · GHSA-4g99-f82w-mhgr

Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) admin/search.asp and (2) gallery.asp.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01102 Published 2008-06-18 No fix listed CWE-79

TI-2006-01365 CVE-2006-1411 · GHSA-p4cq-cm47-qhq8

Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier…

LOW 22

Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2006-03-28 No fix listed

TI-2005-04039 CVE-2005-4295 · GHSA-2wc8-fx5r-628m

Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01164 Published 2005-12-16 No fix listed

Open these records in search →

Critical	0
High	17
Medium	16
Low	4
No CVSS	0