Lucene search

[email protected]CVE-2010-0460

HistoryJan 28, 2010 - 8:30 p.m.

CVE-2010-0460

2010-01-2820:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve

2010

0460

xss

vulnerabilities

kayako supportsuite

web script

html

insertquestion action

nvd

5.9 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

46.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the (1) subject parameter and (2) contents parameter (aka body) in an insertquestion action. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
kayako:esupportkayako esupportle3.60.04
kayako:supportsuitekayako supportsuiteeq3.0
kayako:supportsuitekayako supportsuiteeq3.30
kayako:supportsuitekayako supportsuiteeq3.10.00
kayako:supportsuitekayako supportsuiteeq3.00.32
kayako:supportsuitekayako supportsuiteeq3.20.02
kayako:supportsuitekayako supportsuiteeq3.50.06
kayako:supportsuitekayako supportsuiteeq3.00.26
kayako:supportsuitekayako supportsuiteeq3.11.01
kayako:supportsuitekayako supportsuiteeq3.11.00

CPE	Name	Operator	Version
kayako:esupport	kayako esupport	le	3.60.04
kayako:supportsuite	kayako supportsuite	eq	3.0
kayako:supportsuite	kayako supportsuite	eq	3.30
kayako:supportsuite	kayako supportsuite	eq	3.10.00
kayako:supportsuite	kayako supportsuite	eq	3.00.32
kayako:supportsuite	kayako supportsuite	eq	3.20.02
kayako:supportsuite	kayako supportsuite	eq	3.50.06
kayako:supportsuite	kayako supportsuite	eq	3.00.26
kayako:supportsuite	kayako supportsuite	eq	3.11.01
kayako:supportsuite	kayako supportsuite	eq	3.11.00

Rows per page:

1-10 of 111

References

osvdb.org/61928

packetstormsecurity.org/1001-advisories/kayako-xss.txt

secunia.com/advisories/38322

www.securityfocus.com/archive/1/509122/100/0/threaded

www.securityfocus.com/bid/37947

exchange.xforce.ibmcloud.com/vulnerabilities/55859

5.9 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

46.5%

JSON

Related for CVE-2010-0460

prion1 cvelist1