CVE-2007-6269

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-12-07 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.

Affected products

Xigla Absolute News Manager.Net: 5.1

References

http://marc.info/?l=bugtraq&m=119678724111351&w=2
http://osvdb.org/40576
http://secunia.com/advisories/27923
http://www.procheckup.com/Vulnerability_PR07-39.php
http://www.securityfocus.com/bid/26692
http://www.xigla.com/news/default.aspx
http://www.xigla.com/security/ANMNET51-SecurityUpdate20071128.zip
https://exchange.xforce.ibmcloud.com/vulnerabilities/38871
http://marc.info/?l=bugtraq&m=119678724111351&w=2
http://osvdb.org/40576
http://secunia.com/advisories/27923
http://www.procheckup.com/Vulnerability_PR07-39.php

Get alerted when CVE-2007-6269 or the next vulnerability affects your stack