CVE-2010-1911

The site-locking implementation in the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance relies on a list of server domain names to restrict execution of ActiveX controls, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a DNS hijacking attack.

• CWE-310

• http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html
• http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdfPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/602801Patch, US Government Resource
• http://www.securityfocus.com/archive/1/511176/100/0/threaded
• http://www.wintercore.com/downloads/rootedcon_0day.pdfExploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58608
• http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html
• http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdfPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/602801Patch, US Government Resource
• http://www.securityfocus.com/archive/1/511176/100/0/threaded
• http://www.wintercore.com/downloads/rootedcon_0day.pdfExploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58608

Published

May 12, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1905Multiple cross-site scripting (XSS) vulnerabilities in Conso…
• CVE-2010-1906tgsrv.exe in the Repair Service in Consona Dynamic Agent, Re…
• CVE-2010-1907The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Conso…
• CVE-2010-1908The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Conso…
• CVE-2010-1909Buffer overflow in the RunCmd method in the SdcUser.TgConCtl…
• CVE-2010-1910The Forgot Password implementation in Consona Live Assistanc…
• CVE-2010-1912The SdcWebSecureBase interface in tgctlcm.dll in Consona Liv…
• CVE-2010-1913The default configuration of pluginlicense.ini for the SdcWe…
• CVE-2010-1914The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.…
• CVE-2010-1915The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 th…
• CVE-2010-1916The dynamic configuration feature in Xinha WYSIWYG editor 0.…
• CVE-2010-1917Stack consumption vulnerability in PHP 5.2 through 5.2.13 an…