CVE-2006-1410

CVE-2006-1410 affects XIGLA Absolute Live Support XE 2.0 and earlier. The vulnerability is multiple XSS flaws that allow a remote attacker to inject arbitrary web script or HTML via the Screen name or Session Topic fields. The sources in the connected documents confirm the affected product/versio...

CVE-2008-2763

CVE-2008-2763 affects Xigla Absolute Live Support XE 5.1. A SQL injection flaw resides in search.asp reachable via the orderby parameter, allowing remote authenticated administrators to execute arbitrary SQL commands. Documented impact aligns with partial confidentiality/integrity/availability; C...

CVE-2008-2764

CVE-2008-2764 is a cross-site scripting (XSS) vulnerability in admin/search.asp of Xigla Absolute Live Support XE 5.1. The issue allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors in all fields. The public sources (NVD/NVD-related entries) co...