CVE-2004-1413

Kayako eSupport 2.x is affected by multiple SQL injection vulnerabilities (in index.php via subcat, rate, questiondetails, ticketkey22, email22 parameters, and in the Forgot Key email field). The underlying issue allows remote attackers to execute arbitrary SQL commands. Affected product/componen...