{"api_version":"1","generated_at":"2026-07-23T08:06:04+00:00","cve":"CVE-2008-2759","urls":{"html":"https://cve.report/CVE-2008-2759","api":"https://cve.report/api/cve/CVE-2008-2759.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-2759","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-2759"},"summary":{"title":"CVE-2008-2759","description":"Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-06-18 22:41:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/29672","name":"http://www.securityfocus.com/bid/29672","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Xigla Software Multiple Scripts SQL Injection and Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43047","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43047","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://bugreport.ir/index.php?/41","name":"http://bugreport.ir/index.php?/41","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"BugReport.ir - Security Advisory - Vulnerabilities","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/30640","name":"http://secunia.com/advisories/30640","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Absolute Form Processor XE Cross-Site Scripting Vulnerabilities - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/3950","name":"http://securityreason.com/securityalert/3950","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - Xigla Multiple Products - Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","name":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2759","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2759","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"2759","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"xigla","cpe5":"absolute_form_processor_xe","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T09:14:14.822Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"absoluteform-search-users-xss(43047)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43047"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://bugreport.ir/index.php?/41"},{"name":"29672","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/29672"},{"name":"30640","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30640"},{"name":"20080611 Xigla Multiple Products - Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2"},{"name":"3950","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3950"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-06-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"absoluteform-search-users-xss(43047)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43047"},{"tags":["x_refsource_MISC"],"url":"http://bugreport.ir/index.php?/41"},{"name":"29672","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/29672"},{"name":"30640","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30640"},{"name":"20080611 Xigla Multiple Products - Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2"},{"name":"3950","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3950"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-2759","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"absoluteform-search-users-xss(43047)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43047"},{"name":"http://bugreport.ir/index.php?/41","refsource":"MISC","url":"http://bugreport.ir/index.php?/41"},{"name":"29672","refsource":"BID","url":"http://www.securityfocus.com/bid/29672"},{"name":"30640","refsource":"SECUNIA","url":"http://secunia.com/advisories/30640"},{"name":"20080611 Xigla Multiple Products - Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2"},{"name":"3950","refsource":"SREASON","url":"http://securityreason.com/securityalert/3950"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-2759","datePublished":"2008-06-18T22:00:00.000Z","dateReserved":"2008-06-18T00:00:00.000Z","dateUpdated":"2024-08-07T09:14:14.822Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-06-18 22:41:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_form_processor_xe:4.0:*:*:*:*:*:*:*","matchCriteriaId":"3D30D88A-A3B6-4158-A50D-94E76D9A7C03"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"2759","Ordinal":"1","Title":"CVE-2008-2759","CVE":"CVE-2008-2759","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"2759","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information.","Type":"Description","Title":"CVE-2008-2759"},{"CveYear":"2008","CveId":"2759","Ordinal":"2","NoteData":"2008-06-18","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"2759","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}