Vulnerabilities

TI-2010-00438 CVE-2010-0460 · GHSA-6w8q-vjhq-6qf2

Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako…

LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the (1) subject parameter and…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0103 Published 2010-01-28 No fix listed CWE-79

TI-2009-03404 CVE-2009-3567 · GHSA-478q-7xf2-cxcp

Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in…

LOW 22

Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-10-06 No fix listed CWE-79

TI-2009-03266 CVE-2009-3427 · GHSA-6qwv-phcw-fvw8

Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01062 Published 2009-09-25 No fix listed CWE-79

TI-2008-03543 CVE-2008-3701 · GHSA-cv2r-cj8v-q8j3

SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier…

LOW 33

SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitrary SQL commands via the customfieldlinkid parameter in a delcflink action.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01925 Published 2008-08-15 No fix listed CWE-89

TI-2008-03542 CVE-2008-3700 · GHSA-xxqm-cf86-wmxp

Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the sessionid parameter in a livesupport startclientcha…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04103 Published 2008-08-15 No fix listed CWE-79

TI-2008-00370 CVE-2008-0395 · GHSA-c3vf-92xj-4r66

Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration…

LOW 25

Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $_SERVER superglobal.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01218 Published 2008-01-23 No fix listed CWE-200

TI-2006-05609 CVE-2006-5825 · GHSA-4x6p-gmc2-vmc4

Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script or HTML via the query string.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0168 Published 2006-11-10 No fix listed

TI-2005-04368 CVE-2005-4638 · GHSA-frfc-2472-vf85

index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the…

LOW 26

index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in the news module, (3) downloaditemid parameter in the downloads module, and (4) k…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01409 Published 2006-01-09 No fix listed

Vulnerabilities

Filters