https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-6860.htmlhttps://patchthecve.com/cve/CVE-2008-6860.htmlTue, 16 Jun 2026 23:03:07 +0000HIGH 7.5: Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value.https://patchthecve.com/cve/CVE-2008-4569.htmlhttps://patchthecve.com/cve/CVE-2008-4569.htmlTue, 16 Jun 2026 22:58:05 +0000HIGH 7.5: SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary SQL commands via the p parameter.https://patchthecve.com/cve/CVE-2008-2768.htmlhttps://patchthecve.com/cve/CVE-2008-2768.htmlTue, 16 Jun 2026 22:54:25 +0000LOW 3.5: Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to inject arbitrary web script or HTML via unspecified vectors ("all fields").https://patchthecve.com/cve/CVE-2008-2767.htmlhttps://patchthecve.com/cve/CVE-2008-2767.htmlTue, 16 Jun 2026 22:54:25 +0000MEDIUM 6.5: SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter.