CVE-2008-2762: Xigla Absolute Form Processor XE

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.

Affected products

• Xigla Absolute Form Processor XE: version 4.0 only

Published 2008-06-18. Last modified 2026-06-16.