CVE-2008-0395

Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $SERVER superglobal...

Kayako SupportSuite syncml/index.php Direct Request Remote Information Disclosure

The version of Kayako SupportSuite installed on the remote host returns PHP's '$SERVER' superglobal variable in response to a request for Kayako's 'syncml/index.php' page. This variable contains information about the remote web server, some of which might be sensitive. %NASLMINLEVEL 70300 C Tenab...

CVE-2008-0395: Exposure of Sensitive Information to an Unauthorized Actor

Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $SERVER superglobal...

Kayako SupportSuite 3.0.32 - 'PHP_SELF Trigger_Error' Function Cross-Site Scripting

source: https://www.securityfocus.com/bid/26744/info SupportSuite is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a 1 lostpassword or 2 register action in index.php, 3 unspecified vectors in the Submit form in ...

CVE-2007-1145

Multiple cross-site scripting XSS vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a 1 lostpassword or 2 register action in index.php, 3 unspecified vectors in the Submit form in ...

CVE-2007-1145

Multiple cross-site scripting XSS vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a 1 lostpassword or 2 register action in index.php, 3 unspecified vectors in the Submit form in ...

CVE-2007-1145

Multiple cross-site scripting XSS vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a 1 lostpassword or 2 register action in index.php, 3 unspecified vectors in the Submit form in ...

CVE-2007-1145

Technical details for CVE-2007-1145 are not publicly available in the provided documents. No affected products, vectors, or remediation are specified here; monitor for updates as new information may appear.

CVE-2007-1145: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a 1 lostpassword or 2 register action in index.php, 3 unspecified vectors in the Submit form in ...

ESupport Multiple HTML Injection Vulnerabilities

ESupport Multiple HTML Injection Vulnerabilities Kayako SupportSuite offers true integrated Multi-Channel solution allowing you to manage your emails, online issues, chats, self service and issues received by phone. The entire system has been designed to improve productivity and provide seamless...

CVE-2006-5825

Cross-site scripting XSS vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2006-5825

Kayako SupportSuite 3.00.32 is affected by an XSS vulnerability in index.php that allows remote attackers to inject arbitrary web script or HTML via the query string. The issue is underlying the CVE-2006-5825 entry; CVSS v2 base score is 4.3 (Medium) with user interaction not required and partial...

CVE-2006-5825

Cross-site scripting XSS vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2006-5825: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script or HTML via the query string...

kayakoSS-XSS.txt

XSS in Kayako SupportSuite v3.00.32 Author: Dr.HAiL Script : support/index.php Found : www.support.kayako.net Risk : Normal but Dangerous some t!me Dork : "Kayako SupportSuite v3.00.32" Exploit: www.Site.com/support Path/index.php?=xss GreestZ: Mohajer22 & abu melaf & abdullah00 & all my Friend i...

Kayako SupportSuite 3.0.32 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20954/info Kayako SupportSuite is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Kayako SupportSuite 3.0.32 - index.php Cross-Site Scripting

Kayako SupportSuite 3.0.32 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20954/info Kayako SupportSuite is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CVE-2005-4637

Multiple cross-site scripting XSS vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 nav parameter in the downloads module, 2 Full Name and 3 Email fields in the core module, 4 Full Name, 5 Email, and 6...

CVE-2005-4638

The CVE-2005-4638 entry involves Kayako SupportSuite 3.00.26 and earlier where the index.php in multiple modules (news, downloads, knowledgebase) can reveal the full server path via specific parameters: _a, newsid, downloaditemid, kbarticleid. This is a path disclosure vulnerability in the affect...