CVE-2006-1410

Published: Mar 28, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Screen name or (2) Session Topic field.

Affected (1)

Products: Xigla: Absolute Live Support Xe

Xigla

1 product

Absolute Live Support Xe

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xigla Absolute Live Support Xe	Version 2.0

References (12)

http://pridels0.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/19415

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/24131

Source: cve@mitre.org

http://www.securityfocus.com/bid/17258

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1099

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25434

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html