Vulnerability CVE-2006-1410
Published: 2006-03-28   Modified: 2012-02-12

Description:
Multiple cross-site scripting (XSS) vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Screen name or (2) Session Topic field.

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
2.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
Xigla -> Absolute live support xe 

 References:
http://www.vupen.com/english/advisories/2006/1099
http://www.securityfocus.com/bid/17258
http://secunia.com/advisories/19415
http://xforce.iss.net/xforce/xfdb/25434
http://www.osvdb.org/24131
http://pridels0.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html
Copyright 2024, cxsecurity.com

 

Back to Top