CVE-2005-2461

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 31/12/2005 Updated: 18/10/2016

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 645

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote malicious users to execute arbitrary SQL commands via the (1) year or (2) date parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kayako liveresponse 2.0

source: wwwsecurityfocuscom/bid/14425/info Kayako LiveResponse is prone to multiple cross-site scripting, SQL injection, and HTML injection vulnerabilties These issues are all related to input validation errors The cross-site scripting and HTML injection vulnerabilities may allow for theft of cookie-based authentication credentials o ...

NVD-CWE-Other http://www.gulftech.org/?node=research&article_id=00092-07302005 http://www.securityfocus.com/bid/14425 http://www.osvdb.org/18396 http://secunia.com/advisories/16286 http://marc.info/?l=bugtraq&m=112274359718863&w=2 https://nvd.nist.gov https://www.exploit-db.com/exploits/26052/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-2461

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect