90 matches found
Kayako eSupport <= 2.3.1 (subd) Remote File Inclusion Vulnerability
No description provided by source. Script: Kayako eSupport = 2.3.1 Vendor: Kayako www.kayako.com Discovered: beford xbefordx gmail com Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noobs...
Kayako eSupport 2.3.1 - subd Remote File Inclusion
Kayako eSupport 2.3.1 - subd Remote File Inclusion Script: Kayako eSupport Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noobs. Requires that "registerglobals" is enabled. Vulnerable File:...
Kayako eSupport 2.3.1 - 'subd' Remote File Inclusion
Script: Kayako eSupport Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noobs. Requires that "registerglobals" is enabled. Vulnerable File: esupport/admin/autoclose.php code requireonce $subd...
Kayako eSupport SQLi / XSS Vulnerabilities
Kayako eSupport is prone to SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2005-0842
Cross-site scripting XSS vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the 1 i or 2 c parameter...
CVE-2005-0487
Cross-site scripting XSS vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter...
CVE-2005-0842
CVE-2005-0842 involves a cross-site scripting (XSS) vulnerability in Kayako eSupport version 2.3. The flaw occurs in index.php via the parameters _i and _c, allowing remote attackers to inject arbitrary web script or HTML in a victim’s browser. The public description does not specify a fix or aff...
CVE-2005-0842
Cross-site scripting XSS vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the 1 i or 2 c parameter...
kayakoXSS2.txt
GulfTech Security Research March 22, 2005 Vendor : Kayako Web Solutions URL : http://www.kayako.com/ Version : Kayako eSupport v2.3 Risk : Cross Site Scripting Description: Kayako eSupport is a popular helpdesk, and support software. It is used by many businesses for customer support purposes...
Kayako eSupport Cross Site Scripting
GulfTech Security Research March 22, 2005 Vendor : Kayako Web Solutions URL : http://www.kayako.com/ Version : Kayako eSupport v2.3 Risk : Cross Site Scripting Description: Kayako eSupport is a popular helpdesk, and support software. It is used by many businesses for customer support purposes...
Kayako ESupport 2.3 - index.php Multiple Cross-Site Scripting Vulnerabilities
Kayako ESupport 2.3 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12868/info Kayako ESupport is prone to a cross-site scripting vulnerability. Multiple parameters of the 'index.php' script can be exploited to pass malicious HTML and script cod...
Kayako ESupport 2.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/12868/info Kayako ESupport is prone to a cross-site scripting vulnerability. Multiple parameters of the 'index.php' script can be exploited to pass malicious HTML and script code to the application. This would occur in the security context of the affected...
Kayako eSupport Troubleshooter Module index.php Multiple Parameter XSS
The version of Kayako eSupport installed on the remote host is subject to multiple cross-site scripting vulnerabilities in the script 'index.php' through the parameters 'i' and 'c'. These issues may allow an attacker to inject HTML and script code into a user's browser within the context of the...
kayakoXSS.txt
--BQPnanjtCNWHyqYD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable http://www.google.com/search?q=3D%22Powered+By+kayako+eSupport%22+%22search= +the+entire+knowledgebase%22 1290 customers according to Google...
CVE-2005-0487
Cross-site scripting XSS vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter...
CVE-2005-0487
CVE-2005-0487 affects Kayako ESupport 2.3.1 (and possibly other versions). The vulnerability is a cross-site scripting (XSS) flaw in index.php exposed via the nav parameter, allowing remote attackers to inject arbitrary HTML/script. The NVD entry lists a base CVSS v2 score of 6.8 (MEDIUM) with ne...
Kayako eSupport index.php nav Parameter XSS
The remote host is running Kayako eSupport, a web-based support and help desk application. This version of eSupport is vulnerable to a cross-site scripting flaw involving the 'nav' parameter of the 'index.php' script. An attacker, exploiting this flaw, would need to be able to coerce an...
[Full-Disclosure] Kayako eSupport v2.3.1 Support Tracker XSS Vulnerability
http://www.google.com/search?q=22Powered+By+kayako+eSupport22+22search+the+entire+knowledgebase22 1290 customers according to Google. http://support.kayako.com/index.php?a=knowledgebase&j=questiondetails&i=2&nav=XSS&nav2=General20eSupport20Q&A Vendor notified by their access log files and this...