CVE-2005-4637

Kayako SupportSuite 3.00.26 and earlier (index.php) contains multiple XSS flaws. Exploitable via (1) nav parameter in downloads module, (2) Full Name and (3) Email in core, (4) Full Name, (5) Email, and (6) Subject in tickets, and (7) Registered Email in lostpassword feature. Impact per sources: ...

CVE-2005-4637: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 nav parameter in the downloads module, 2 Full Name and 3 Email fields in the core module, 4 Full Name, 5 Email, and 6...

CVE-2005-4638: Undefined Security Weakness

index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via 1 a and 2 newsid parameters in the news module, 3 downloaditemid parameter in the downloads module, and 4 kbarticleid parameter in the knowledgebase module...

CVE-2005-4638

index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via 1 a and 2 newsid parameters in the news module, 3 downloaditemid parameter in the downloads module, and 4 kbarticleid parameter in the knowledgebase module...

Kayako SupportSuite 3.0 0.26 - Multiple Cross-Site Scripting Vulnerabilities

Kayako SupportSuite 3.0 0.26 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16094/info Kayako SupportSuite is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the...

Kayako SupportSuite multiple vuln.

Kayako SupportSuite multiple vuln. Vuln. discovered by : r0t Date: 30 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html vendor:http://www.kayako.com/supportsuite.php affected version: v3.00.26 and prior Product Description: Kayako SupportSuite...

Kayako SupportSuite 3.0 0.26 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16094/info Kayako SupportSuite is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may...