91 matches found
Kayako eSupport 2.3.1 - subd Remote File Inclusion
Kayako eSupport 2.3.1 - subd Remote File Inclusion Script: Kayako eSupport Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noobs. Requires that "registerglobals" is enabled. Vulnerable File:...
Kayako eSupport 2.3.1 - 'subd' Remote File Inclusion
Script: Kayako eSupport Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noobs. Requires that "registerglobals" is enabled. Vulnerable File: esupport/admin/autoclose.php code requireonce $subd...
Kayako eSupport SQLi / XSS Vulnerabilities
Kayako eSupport is prone to SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2005-0487
Cross-site scripting XSS vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter...
CVE-2005-0842
CVE-2005-0842 involves a cross-site scripting (XSS) vulnerability in Kayako eSupport version 2.3. The flaw occurs in index.php via the parameters _i and _c, allowing remote attackers to inject arbitrary web script or HTML in a victim’s browser. The public description does not specify a fix or aff...
CVE-2005-0842
Cross-site scripting XSS vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the 1 i or 2 c parameter...
kayakoXSS2.txt
GulfTech Security Research March 22, 2005 Vendor : Kayako Web Solutions URL : http://www.kayako.com/ Version : Kayako eSupport v2.3 Risk : Cross Site Scripting Description: Kayako eSupport is a popular helpdesk, and support software. It is used by many businesses for customer support purposes...
CVE-2005-0842: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the 1 i or 2 c parameter...
Kayako ESupport 2.3 - index.php Multiple Cross-Site Scripting Vulnerabilities
Kayako ESupport 2.3 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12868/info Kayako ESupport is prone to a cross-site scripting vulnerability. Multiple parameters of the 'index.php' script can be exploited to pass malicious HTML and script cod...
Kayako eSupport Troubleshooter Module index.php Multiple Parameter XSS
The version of Kayako eSupport installed on the remote host is subject to multiple cross-site scripting vulnerabilities in the script 'index.php' through the parameters 'i' and 'c'. These issues may allow an attacker to inject HTML and script code into a user's browser within the context of the...
Kayako ESupport 2.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/12868/info Kayako ESupport is prone to a cross-site scripting vulnerability. Multiple parameters of the 'index.php' script can be exploited to pass malicious HTML and script code to the application. This would occur in the security context of the affected...
kayakoXSS.txt
--BQPnanjtCNWHyqYD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable http://www.google.com/search?q=3D%22Powered+By+kayako+eSupport%22+%22search= +the+entire+knowledgebase%22 1290 customers according to Google...
CVE-2005-0487
Cross-site scripting XSS vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter...
CVE-2005-0487
CVE-2005-0487 affects Kayako ESupport 2.3.1 (and possibly other versions). The vulnerability is a cross-site scripting (XSS) flaw in index.php exposed via the nav parameter, allowing remote attackers to inject arbitrary HTML/script. The NVD entry lists a base CVSS v2 score of 6.8 (MEDIUM) with ne...
CVE-2005-0487: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter...
Kayako eSupport index.php nav Parameter XSS
The remote host is running Kayako eSupport, a web-based support and help desk application. This version of eSupport is vulnerable to a cross-site scripting flaw involving the 'nav' parameter of the 'index.php' script. An attacker, exploiting this flaw, would need to be able to coerce an...
[Full-Disclosure] Kayako eSupport v2.3.1 Support Tracker XSS Vulnerability
http://www.google.com/search?q=22Powered+By+kayako+eSupport22+22search+the+entire+knowledgebase22 1290 customers according to Google. http://support.kayako.com/index.php?a=knowledgebase&j=questiondetails&i=2&nav=XSS&nav2=General20eSupport20Q&A Vendor notified by their access log files and this...
Kayako eSupport Multiple XSS
Binary data 2621.prm...
CVE-2004-1413
Kayako eSupport 2.x is affected by multiple SQL injection vulnerabilities (in index.php via subcat, rate, questiondetails, ticketkey22, email22 parameters, and in the Forgot Key email field). The underlying issue allows remote attackers to execute arbitrary SQL commands. Affected product/componen...