CVE-2010-2912

CVE-2010-2912 describes an SQL injection in Kayako eSupport 3.70.02, exploitable via the _a parameter of a downloads action in index.php. The vulnerability could allow remote attackers to execute arbitrary SQL commands, with impact described as partial confidentiality, integrity, and availability...

CVE-2010-2912

creationtimestamp| type| source ---|---|--- 2010-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14392...