Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown

CVE-2010-0460

Disclosure Date: January 28, 2010 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the (1) subject parameter and (2) contents parameter (aka body) in an insertquestion action. NOTE: some of these details are obtained from third party information.
0
0
Attacker Value
Unknown

CVE-2009-3567

Disclosure Date: October 06, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145.
0
0
Attacker Value
Unknown

CVE-2009-3427

Disclosure Date: September 25, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket.
0
0
Attacker Value
Unknown

CVE-2008-3701

Disclosure Date: August 15, 2008 (last updated October 04, 2023)
SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitrary SQL commands via the customfieldlinkid parameter in a delcflink action.
0
0
Attacker Value
Unknown

CVE-2008-3700

Disclosure Date: August 15, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the sessionid parameter in a livesupport startclientchat action to visitor/index.php; (2) the filter parameter in a news view action to index.php; or the Full Name field in a (3) account creation, (4) ticket opening, or (5) chat request operation.
0
0
Attacker Value
Unknown

CVE-2008-0395

Disclosure Date: January 23, 2008 (last updated October 04, 2023)
Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $_SERVER superglobal.
0
0
Attacker Value
Unknown

CVE-2006-5825

Disclosure Date: November 10, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script or HTML via the query string.
0
0
Attacker Value
Unknown

CVE-2005-4638

Disclosure Date: December 31, 2005 (last updated February 22, 2025)
index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in the news module, (3) downloaditemid parameter in the downloads module, and (4) kbarticleid parameter in the knowledgebase module.
0
0