Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:50
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=110352428607171&w=2 - | |
References | () http://www.gulftech.org/?node=research&article_id=00056-12182004 - Exploit | |
References | () http://www.securityfocus.com/bid/12037 - Exploit | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/18572 - |
Information
Published : 2004-12-31 05:00
Updated : 2024-11-20 23:50
NVD link : CVE-2004-1413
Mitre link : CVE-2004-1413
CVE.ORG link : CVE-2004-1413
JSON object : View
Products Affected
kayako
- esupport
CWE