CVE-2012-3233

CVE-2012-3233 describes an XSS in Kayako Fusion 4.40.1148 via the file path in /__swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php using PATH_INFO . Public advisories note the vulnerability affected Kayako Fusion and were fixed by upgrading to 4.50.1581 ; exploitation requires tha...

Cross-Site Scripting (XSS) in Kayako Fusion

Advisory ID: HTB23095 Product: Kayako Fusion Vendor: Kayako Vulnerable Versions: 4.40.1148 and probably prior Tested Version: 4.40.1148 Vendor Notification: June 6, 2012 Public Disclosure: September 5, 2012 Vulnerability Type: Cross-Site Scripting CWE-79 CVE Reference: CVE-2012-3233 CVSSv2 Base...

Kayako Fusion 4.40.1148 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Product: Kayako Fusion Vendor: Kayako Vulnerable Versions: 4.40.1148 and probably prior Tested Version: 4.40.1148 Vendor Notification: June 6, 2012 Public Disclosure: September 5, 2012 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...

Kayako Fusion 4.40.1148 Cross Site Scripting

Advisory ID: HTB23095 Product: Kayako Fusion Vendor: Kayako Vulnerable Versions: 4.40.1148 and probably prior Tested Version: 4.40.1148 Vendor Notification: June 6, 2012 Public Disclosure: September 5, 2012 Vulnerability Type: Cross-Site Scripting CWE-79 CVE Reference: CVE-2012-3233 CVSSv2 Base...