PT-2006-2419 · Xigla · Xigla Absolute Live Support Xe

Published 2006-03-28 · Updated 2017-07-20 · CVE-2006-1410

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions XIGLA Absolute Live Support XE versions 2.0 and earlier

Description The issue allows remote attackers to inject arbitrary web script or HTML via the Screen name or Session Topic field, potentially leading to cross-site scripting (XSS) attacks.

Recommendations For XIGLA Absolute Live Support XE versions 2.0 and earlier, consider disabling the Screen name and Session Topic fields until a patch is available to prevent exploitation. Restrict access to these fields to minimize the risk of XSS attacks.

Fix

Related Identifiers

CVE-2006-1410

Affected Products

Xigla Absolute Live Support Xe

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-1410 · Security Note
• http://secunia.com/advisories/19415 · Vendor Advisory
• http://pridels0.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html · Note
• http://vupen.com/english/advisories/2006/1099 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25434 · Note
• http://securityfocus.com/bid/17258 · Note
• http://osvdb.org/24131 · Note