{"id":"CVE-2007-6269","aliases":["EUVD-2007-6237","GHSA-c6r6-x5xg-23wm"],"status":"published","title":"Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1...","description":"Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02879,"percentile":0.86934,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2007-12-07T11:00:00Z","modified":"2026-06-16T22:47:43Z","exploits":[{"source":"exploitdb","id":"EDB-30842","title":"Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx' Multiple SQL Injections","type":"webapps","platform":"asp","date":"2007-12-04","verified":true,"url":"https://www.exploit-db.com/exploits/30842"}],"products":[{"vendor":"xigla","product":"absolute_news_manager.net"}],"references":[{"url":"http://www.procheckup.com/Vulnerability_PR07-39.php","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38871","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://osvdb.org/40576","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.xigla.com/news/default.aspx","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.xigla.com/security/ANMNET51-SecurityUpdate20071128.zip","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/26692","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq\u0026m=119678724111351\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/27923","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6269"},{"url":"https://github.com/advisories/GHSA-c6r6-x5xg-23wm"}],"sources":{"cve":[{"id":"CVE-2007-6269","description":"Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.","status":"published","published":"2007-12-07T11:00:00Z","modified":"2024-08-07T16:02:36.831Z","updated_at":"2026-11-02T13:33:07.91528Z"}],"euvd":[{"id":"EUVD-2007-6237","description":"Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.","status":"published","published":"2007-12-07T11:00:00Z","modified":"2024-08-07T16:02:36Z","updated_at":"2026-11-03T01:16:13.781034Z"}],"ghsa":[{"id":"GHSA-c6r6-x5xg-23wm","title":"Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1...","description":"Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.","status":"published","published":"2022-05-01T18:41:12Z","modified":"2023-01-31T05:05:01Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:48:46.75183Z"}],"nvd":[{"id":"CVE-2007-6269","description":"Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.","status":"published","published":"2007-12-07T11:46:00Z","modified":"2026-06-16T22:47:43.26Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:01:23.208914Z"}]}}