CVE-2008-2763

CVE-2008-2763 affects Xigla Absolute Live Support XE 5.1. A SQL injection flaw resides in search.asp reachable via the orderby parameter, allowing remote authenticated administrators to execute arbitrary SQL commands. Documented impact aligns with partial confidentiality/integrity/availability; C...

CVE-2008-2764

CVE-2008-2764 is a cross-site scripting (XSS) vulnerability in admin/search.asp of Xigla Absolute Live Support XE 5.1. The issue allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors in all fields. The public sources (NVD/NVD-related entries) co...

CVE-2008-2763

SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2008-2764

Cross-site scripting XSS vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors "all fields"...

absolute-screwups.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Xigla Multiple Products - Multiple Vulnerabilities Vendor: http://www.xigla.com/ Exploit: N/A Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/41 1. Description: Xigla company has several web based products From...

AlstraSoft Live Support Managesettings.PHP密码泄露漏洞

AlstraSoft Live Support是一款基于PHP的WEB应用程序。 AlstraSoft Live Support脚本不正确过滤用户提交的输入，远程攻击者可以利用漏洞获得敏感信息。 问题是'managesettings.php'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 AlstraSoft Live Support 1.21 目前没有解决方案提供： http://www.alstrasoft.com/livesupport.htm...

Design/Logic Flaw

AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request to admin/managesettings.php...

CVE-2007-2775

AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request to admin/managesettings.php...

CVE-2007-2775

CVE-2007-2775 affects AlstraSoft Live Support 1.21. The issue arises when the application issues a redirect but does not exit after missing administrative credentials, enabling a remote attacker to obtain administrative access via a direct request to admin/managesettings.php. The NVD description ...

CVE-2007-2775

AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request to admin/managesettings.php...

livesup-admin.txt

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of LiveSupport Example: php ".$argv0." localhost /LiveSupport/ "; die; errorreporting0;...

AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php...

Alstrasoft Live Support 1.21 - Admin Credential Retrieve

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of LiveSupport Example: php ".$argv0." localhost /LiveSupport/ "; die; errorreporting0;...

AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit

Exploit for unknown platform in category web applications =============================================================== AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit =============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "...

Alstrasoft Live Support 1.21 - Admin Credential Retrieve

Alstrasoft Live Support 1.21 - Admin Credential Retrieve !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of LiveSupport Example: php ".$argv0." localhost...

CVE-2006-5927

Affected software: ASP Scripter Easy Portal 1.4 and Live Support 1.3. - Vulnerability: SQL injection in cpLogin.asp that allows remote attackers to execute arbitrary SQL commands via the Password parameter. - Root cause: improper handling of the Password parameter leading to SQL command injection...

CVE-2006-1410

Multiple cross-site scripting XSS vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Screen name or 2 Session Topic field...

CVE-2006-1410

CVE-2006-1410 affects XIGLA Absolute Live Support XE 2.0 and earlier. The vulnerability is multiple XSS flaws that allow a remote attacker to inject arbitrary web script or HTML via the Screen name or Session Topic fields. The sources in the connected documents confirm the affected product/versio...

CVE-2006-1410

Multiple cross-site scripting XSS vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Screen name or 2 Session Topic field...

Absolute Live Support XE V2.0 XSS vuln.

Absolute Live Support XE V2.0 XSS vuln. Vuln. discovered by : r0t Date: 25 march 2006 vendor:http://www.xigla.com/absolutels/index.htm affected versions:V2.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html Vuln. Description: Absolute Live...