CVE-2008-2767: Xigla Absolute Poll Manager XE

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter.

Affected products

• Xigla Absolute Poll Manager XE: any version

Published 2008-06-18. Last modified 2026-06-16.