Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2007-12-07	CVE-2007-6271	Improper Input Validation vulnerability in Xigla Absolute News Manager.Net 5.1 Absolute News Manager.NET 5.1 allows remote attackers to obtain sensitive information via a direct request to getpath.aspx, which reveals the installation path in an error message. network low complexity xigla CWE-20	5.0
2007-12-07	CVE-2007-6270	Cross-Site Scripting vulnerability in Xigla Absolute News Manager.Net 5.1 Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) rmore parameter to xlaabsolutenm.aspx and the (2) template parameter to pages/default.aspx. network xigla CWE-79	4.3
2007-12-07	CVE-2007-6268	Path Traversal vulnerability in Xigla Absolute News Manager.Net 5.1 Directory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows remote attackers to read arbitrary files via a .. network low complexity xigla CWE-22	5.0