CVE-2005-2461

Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter.
Configurations

Configuration 1 (hide)

cpe:2.3:a:kayako:liveresponse:2.0:*:*:*:*:*:*:*

History

20 Nov 2024, 23:59

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=112274359718863&w=2 - () http://marc.info/?l=bugtraq&m=112274359718863&w=2 -
References () http://secunia.com/advisories/16286 - Vendor Advisory () http://secunia.com/advisories/16286 - Vendor Advisory
References () http://www.gulftech.org/?node=research&article_id=00092-07302005 - () http://www.gulftech.org/?node=research&article_id=00092-07302005 -
References () http://www.osvdb.org/18396 - () http://www.osvdb.org/18396 -
References () http://www.securityfocus.com/bid/14425 - () http://www.securityfocus.com/bid/14425 -

Information

Published : 2005-12-31 05:00

Updated : 2024-11-20 23:59


NVD link : CVE-2005-2461

Mitre link : CVE-2005-2461

CVE.ORG link : CVE-2005-2461


JSON object : View

Products Affected

kayako

  • liveresponse