CVE-2005-2463

Kayako LiveResponse 2.x vulnerability (CVE-2005-2463) lets remote attackers obtain sensitive information by directly requesting addressbook.php and other include scripts, with the path exposed in an error message. Affected software: Kayako LiveResponse 2.x. Impact: information disclosure with par...

CVE-2005-2462

Kayako LiveResponse 2.x is affected by a vulnerability where, during user login, the password is recorded in plaintext in the URL. This enables local users and possibly remote attackers to gain privileges and access sensitive information. The issue is discussed across multiple sources, and relate...

CVE-2005-2460

CVE-2005-2460 affects Kayako LiveResponse 2.x. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the username parameter or the name field when a user enters a session or sends a message. NVD metrics indicate a medium severity (base score 5.8) with network vector, no authentic...

CVE-2005-2461

CVE-2005-2461 concerns Kayako LiveResponse 2.x, where the calendar feature exposes multiple SQL injection flaws exploitable via the (1) year or (2) date parameters. The NVD entry notes remote, unauthenticated access with network vector and low attack complexity, leading to potentially partial con...