EUVD-2006-1414

Malware in sbrugna...

EUVD-2008-2756

Malware in sbrugna...

EUVD-2008-2757

Malware in sbrugna...

Authentication flaw

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6864

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6864

CVE-2008-6864 affects Xigla Software Absolute Live Support .NET 5.1. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value, effectively compromising session integrity. This is a client-side/authentication bypass issu...

absolutelive-cookie.txt

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By: Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Live Support see script http://www.xigla.com/absolutelsnet/demo.htm Greetz...

Absolute Live Support 5.1 Insecure Cookie Handling Vulnerability

No description provided by source. | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By: Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Live Support see script...

Absolute Live Support 5.1 - Insecure Cookie Handling

Absolute Live Support 5.1 - Insecure Cookie Handling | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By: Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Live Support see...

Absolute Live Support 5.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================ Absolute Live Support 5.1 Insecure Cookie Handling Vulnerability ================================================================ Discovered By: Hakxer Type Gap : Insecure...

Absolute Live Support 5.1 - Insecure Cookie Handling

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By: Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Live Support see script http://www.xigla.com/absolutelsnet/demo.htm Greetz...

CVE-2008-2764

Cross-site scripting XSS vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors "all fields"...

Sql injection

SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2008-2763

SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2008-2764

Cross-site scripting XSS vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors "all fields"...

CVE-2008-2763

SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2008-2764

CVE-2008-2764 is a cross-site scripting (XSS) vulnerability in admin/search.asp of Xigla Absolute Live Support XE 5.1. The issue allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors in all fields. The public sources (NVD/NVD-related entries) co...

CVE-2008-2763

CVE-2008-2763 affects Xigla Absolute Live Support XE 5.1. A SQL injection flaw resides in search.asp reachable via the orderby parameter, allowing remote authenticated administrators to execute arbitrary SQL commands. Documented impact aligns with partial confidentiality/integrity/availability; C...

CVE-2008-2764

Cross-site scripting XSS vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors "all fields"...

absolute-screwups.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Xigla Multiple Products - Multiple Vulnerabilities Vendor: http://www.xigla.com/ Exploit: N/A Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/41 1. Description: Xigla company has several web based products From...