Absolute Form Processor
Publisher
Form Mailer, Form To Database, Form Validator, Autoresponse and More
Product Details
A powerful tool for processing your web based HTML forms. Don�t waste time developing server code, validation rules, form mailers or auto responders for your forms, this application does all this for you. It is the perfect solution for gathering feedback and customer information on your site. It is an application with many, many uses : use it to create surveys, order forms, registration forms, collect e-mails for your mailing lists, create reservation forms, sweepstakes, support and contact forms and anything else where you need to capture your customers information.
Thumbtack Clone Script - Buy2ThumbsupSponsored
posted bySangvishinClone Scripts
PriceUSD 499.00
Views840
User Reviews
Please rate the listing and tell the world know what do you think about the listing.
Vulnerable to SQL Injection
Reviewed byAnonymousonMon, 20th April 2009
As of 4/20/09, this application appears to still be vulnerable to SQL Injection.
http://www.xigla.com/absolutefp/demo/login.asp
I can log on with a very basic sql injection technique.
I've spent 40 hours a week for 10 years developing ASP applications. After looking at the code, I can tell you that you should NOT be using this or any other Xigla applications under any circumstances.
The entire line of Xigla applications appears to be VERY vulnerable to SQL injection attacks.
The site and the applications look very nice, but do not be deceived. They are very poorly and dangerously coded.
If you doubt this review in any way just Google for "Xigla SQL Injection" and you'll see what I mean.
