CVE-2006-1410

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Screen name or (2) Session Topic field.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25434

http://www.vupen.com/english/advisories/2006/1099

http://www.securityfocus.com/bid/17258

http://www.osvdb.org/24131

http://secunia.com/advisories/19415

http://pridels0.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html

Details

Source: Mitre, NVD

Published: 2006-03-28

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N