Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter.
References
Configurations
History
20 Nov 2024, 23:59
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=112274359718863&w=2 - | |
References | () http://secunia.com/advisories/16286 - Vendor Advisory | |
References | () http://www.gulftech.org/?node=research&article_id=00092-07302005 - | |
References | () http://www.osvdb.org/18396 - | |
References | () http://www.securityfocus.com/bid/14425 - |
Information
Published : 2005-12-31 05:00
Updated : 2024-11-20 23:59
NVD link : CVE-2005-2461
Mitre link : CVE-2005-2461
CVE.ORG link : CVE-2005-2461
JSON object : View
Products Affected
kayako
- liveresponse
CWE