Kayako eSupport Knowledgebase Module Multiple Variable XSS

2005-03-22T01:00:47
ID OSVDB:14962
Type osvdb
Reporter OSVDB
Modified 2005-03-22T01:00:47

Description

Manual Testing Notes

http://[victim]/index.php?_a=knowledgebase&_j=questiondetails&_i=[INT][XSS] http://[victim]/index.php?_a=knowledgebase&_j=questionprint&_i=[INT][XSS] http://[victim]/index.php?_a=knowledgebase&_j=subcat&_i=[INT][XSS]

References:

Vendor URL: http://www.kayako.com/ Security Tracker: 1013511 Related OSVDB ID: 14963 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-03/0368.html