Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

kayako esupport vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-3567
Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a differe...
Kayako Esupport 2.2.5Kayako Esupport 2.3Kayako Esupport 2.1.8Kayako Supportsuite 3.10.02Kayako Esupport 2.3.1Kayako Esupport 3.00.13Kayako Supportsuite 3.11.00Kayako Supportsuite 3.00.26Kayako Supportsuite 3.10.00Kayako Esupport 3.04.10Kayako Esupport 3.00.90Kayako Supportsuite 3.20.02Kayako Supportsuite 3.00.32Kayako EsupportKayako SupportsuiteKayako Esupport 2.2Kayako Esupport 2.1.2Kayako Supportsuite 3.11.01Kayako Supportsuite 3.50.06
NA
CVE-2004-1413
Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote malicious users to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature.
Kayako Esupport 2.1.2Kayako Esupport 2.1.8Kayako Esupport 2.3Kayako Esupport 2.2Kayako Esupport 2.2.5
NA
CVE-2004-1412
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote malicious users to inject arbitrary web script or HTML via the searchm parameter.
Kayako Esupport 2.2Kayako Esupport 2.2.5Kayako Esupport 2.1.2Kayako Esupport 2.1.8Kayako Esupport 2.3
NA
CVE-2006-4011
PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and previous versions, when register_globals is enabled, allows remote malicious users to execute arbitrary PHP code via a URL in the subd parameter.
Kayako Esupport 2.3Kayako Esupport 2.3.1
NA
CVE-2007-1145
Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to a (1) lostpassword or (2) register action in index.php, (3) unspecified...
Kayako Esupport 3.00.13Kayako Esupport 3.04.10
NA
CVE-2010-2911
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote malicious users to execute arbitrary SQL commands via the newsid parameter in a viewnews action.
Kayako Esupport 3.70.02
NA
CVE-2007-2562
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote malicious users to inject arbitrary web script or HTML via the _m parameter.
Kayako Esupport 3.00.90
NA
CVE-2010-2912
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote malicious users to execute arbitrary SQL commands via the _a parameter in a downloads action.
Kayako Esupport 3.70.02
NA
CVE-2008-4761
Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote malicious users to inject arbitrary web script or HTML via the jsMakeSrc parameter. NOTE: the provenance of this information is unknown; the ...
Kayako Esupport 3.20.2
NA
CVE-2005-0487
Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote malicious users to inject arbitrary HTML and web script via the nav parameter.
Kayako Esupport 2.3.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028memory leaklog injectionCVE-2024-3400CVE-2022-48695CVE-2022-48675CVE-2024-34487CVE-2024-33792spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook