Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the 1 subject parameter and 2 contents parameter aka body in an insertquestion action. NOTE: some of these...

CVE-2010-0460

CVE-2010-0460 concerns XSS vulnerabilities in Kayako SupportSuite

CVE-2010-0460

Multiple cross-site scripting XSS vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the 1 subject parameter and 2 contents parameter aka body in an insertquestion action. NOTE: some of these...

CVE-2010-0460: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the 1 subject parameter and 2 contents parameter aka body in an insertquestion action. NOTE: some of these...

Kayako SupportSuite Multiple Persistent Cross Site Scripting (Current Versions)

Comodo Group Vendor : Kayako Infotech Ltd. URL : http://www.kayako.com/ Version : Kayako SupportSuite = 3.60.04 We've discovered multiple persistent cross site scripting vulnerabilities in the latest version of Kayako SupportSuite 3.60.04. Because of improper input validation an attacker...

CVE-2009-3567

Cross-site scripting XSS vulnerability in modules/tickets/functionsticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145...

CVE-2009-3567

The CVE-2009-3567 entry describes a Cross-site scripting (XSS) vulnerability in Kayako SupportSuite and eSupport (up to v3.60.04) affecting modules/tickets/functions_ticketsui.php. The flaw allows remote attackers to inject arbitrary script/HTML via unspecified vectors in the staff control panel ...

CVE-2009-3567

Cross-site scripting XSS vulnerability in modules/tickets/functionsticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145...

CVE-2009-3567: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/tickets/functionsticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145...

CVE-2009-3427

Cross-site scripting XSS vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket...

Cross site scripting

Cross-site scripting XSS vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket...

CVE-2009-3427

The CVE-2009-3427 issue affects Kayako SupportSuite, specifically version 3.50.06, which is vulnerable to a cross-site scripting (XSS) flaw in the ticket subject field. The underlying problem is insufficient sanitization of input passed to the subject field, allowing an attacker to inject arbitra...

CVE-2009-3427

Cross-site scripting XSS vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket...

CVE-2009-3427: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket...

Kayako SupportSuite Ticket Subject XSS

According to its banner, the version of Kayako SupportSuite installed on the remote host is earlier than 3.60.04. Such versions are affected by a persistent cross-site scripting vulnerability. Specifically, the installed version fails to sanitize input passed to the subject field while creating a...

Kayako SupportSuite 3.50.06 XSS

nGenuity Information Services – Security Advisory Advisory ID: NGENUITY-2009-008 - Ticket Subject Persistent XSS in Kayako SupportSuite Application: SupportSuite v3.50.06 Vendor: Kayako Vendor website: http://www.kayako.com Author: Adam Baldwin [email protected] Class: Persistent...

Kayako SupportSuite < 3.30.01 Multiple Vulnerabilities

Binary data 4637.prm...

Kayako SupportSuite Version Detection

Binary data 4636.prm...

Kayako SupportSuite < 3.30.01 Multiple Vulnerabilities

The remote host is running Kayako SupportSuite, a web-based electronic support portal written in PHP. According to its banner, the version of Kayako installed on the remote host is earlier than 3.30.01 and is, therefore, affected by several issues: - There is a blind SQL injection issue in the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the sessionid parameter in a livesupport startclientchat action to visitor/index.php; 2 the filter parameter in a news view action to...