CVE-2008-4761

Cross-site scripting XSS vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter. NOTE: the provenance of this information is unknown; the details are obtained sole...

Cross site scripting

Cross-site scripting XSS vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter. NOTE: the provenance of this information is unknown; the details are obtained sole...

CVE-2008-4761

CVE-2008-4761 describes a Cross-site scripting (XSS) vulnerability in Kayako eSupport 3.20.2, triggered through the jsMakeSrc parameter in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php. The issue is believed to reside in the HTMLArea HTMLTidy (HTML Tidy) plugin rather than eSupport itsel...

CVE-2008-4761

Cross-site scripting XSS vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter. NOTE: the provenance of this information is unknown; the details are obtained sole...

Kayako SupportSuite < 3.30.00 Multiple Vulnerabilities

GulfTech Security Research August 09, 2008 Vendor : Kayako Infotech Ltd. URL : http://www.kayako.com/ Version : Kayako SupportSuite 3.30.00 Risk : Multiple Vulnerabilities Description: Kayako SupportSuite is a very popular online eSupport application that consists of several well known Kayako...

CVE-2007-2562

Cross-site scripting XSS vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or HTML via the m parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or HTML via the m parameter...

CVE-2007-2562

Vulnerability summary (CVE-2007-2562) : Kayako eSupport 3.00.90 is affected by a cross-site scripting (XSS) flaw in index.php, exploitable via the _m parameter. The underlying issue is unsanitized input passed through this parameter, allowing remote attackers to inject arbitrary web script or HTM...

CVE-2007-2562

Cross-site scripting XSS vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or HTML via the m parameter...

Kayako eSupport 3.0.90 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23864/info Kayako eSupport is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user...

Kayako eSupport 3.0.90 - index.php Cross-Site Scripting

Kayako eSupport 3.0.90 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23864/info Kayako eSupport is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Kayako eSupport v3.00.90 Cross Site Scripting (XSS)

Script: Kayako eSupport Version: 3.00.90 Explored By: RedCasper United Arab HaCkers Proof: Path/index.php?m="scriptalert1;/script...

CVE-2007-1145

Technical details for CVE-2007-1145 are not publicly available in the provided documents. No affected products, vectors, or remediation are specified here; monitor for updates as new information may appear.

ESupport Multiple HTML Injection Vulnerabilities

ESupport Multiple HTML Injection Vulnerabilities Kayako SupportSuite offers true integrated Multi-Channel solution allowing you to manage your emails, online issues, chats, self service and issues received by phone. The entire system has been designed to improve productivity and provide seamless...

Kayako eSupport autoclose.php远程文件包含漏洞

Kayako eSupport是基于Web的后台技术支持应用程序。 Kayako eSupport对用户请求的处理上存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 Kayako eSupport的esupport/admin/autoclose.php脚本没有正确的过滤subd变量参数的输入，允许攻击者通过包含本地或外部资源导致执行任意代码。 相关的漏洞代码如下： requireonce $subd . "functions.php"; Kayako eSupport = 2.3.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-4011

PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter...

CVE-2006-4011

Kayako eSupport vulnerable to PHP remote file inclusion (CVE-2006-4011) in esupport/admin/autoclose.php for 2.3.1 and earlier when register_globals is enabled. An attacker can specify a URL in the subd parameter to execute arbitrary PHP code. Affected product/version: Kayako eSupport 2.3.1 and ea...

CVE-2006-4011

PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter...

Kayako eSupport <= 2.3.1 (subd) Remote File Inclusion Vulnerability:

Script: Kayako eSupport = 2.3.1 Vendor: Kayako www.kayako.com Discovered: beford xbefordx gmail com Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noobs. Requires that "registerglobals" is...

Kayako eSupport <= 2.3.1 (subd) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== Kayako eSupport Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noob...