Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-1413
cve-2004-1413
sql injection
kayako esupport 2.x
security vulnerability
8.9 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.3%
Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature.
Related
cvelist
cvelist
CVE-2004-1413
2005-02-12 05:00:00
openvas
openvas
Kayako eSupport SQLi / XSS Vulnerabilities
2005-11-03 00:00:00
8.9 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.3%
Related for CVE-2004-1413