PT-2006-2419 · Xigla · Xigla Absolute Live Support Xe

Publicado 2006-03-28 · Atualizado 2017-07-20 · CVE-2006-1410

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions XIGLA Absolute Live Support XE versions 2.0 and earlier

Description The issue allows remote attackers to inject arbitrary web script or HTML via the Screen name or Session Topic field, potentially leading to cross-site scripting (XSS) attacks.

Recommendations For XIGLA Absolute Live Support XE versions 2.0 and earlier, consider disabling the Screen name and Session Topic fields until a patch is available to prevent exploitation. Restrict access to these fields to minimize the risk of XSS attacks.

Correção

Identificadores relacionados

CVE-2006-1410

Produtos afetados

Xigla Absolute Live Support Xe

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-1410 · Nota de Segurança
• http://pridels0.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html · Nota
• http://secunia.com/advisories/19415 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1099 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25434 · Nota
• http://securityfocus.com/bid/17258 · Nota
• http://osvdb.org/24131 · Nota