CVE-2008-2757: Xigla Absolute News Manager XE

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.

Affected products

• Xigla Absolute News Manager XE: version 3.2 only

Published 2008-06-18. Last modified 2026-06-16.