GCVE - cpe:2.3:a:kayako:esupport:2.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kayako:esupport:2.3:*:*:*:*:*:*:*

part: a version: 2.3 update: *

Vendor	Kayako (`9930d4b4-fdc0-5de7-ab36-6a6be5576466`)
Product	Esupport (`1df945eb-5444-5b07-810b-09ba3077aab1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-3567`	vulnerable	2026-06-08 04:51:42.688180	Details available Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145. Published: 2009-10-06T20:19:00.000Z Updated: 2024-08-07T06:31:10.448Z Open on db.gcve.eu Reference links http://secunia.com/advisories/36807 https://exchange.xforce.ibmcloud.com/vulnerabilities/53558 http://osvdb.org/58516 http://blog.kayako.com/2009/09/security-bulletin-supportsuite-and-esupport/ http://www.securityfocus.com/bid/36568	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4011`	vulnerable	2026-06-08 04:49:10.699905	Details available PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter. Published: 2006-08-07T19:00:00.000Z Updated: 2024-08-07T18:48:39.451Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/2115 http://secunia.com/advisories/21330 https://exchange.xforce.ibmcloud.com/vulnerabilities/28199 http://www.securityfocus.com/bid/19315	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0842`	vulnerable	2026-06-08 04:48:13.829463	Details available Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) _i or (2) _c parameter. Published: 2005-03-24T05:00:00.000Z Updated: 2024-08-07T21:28:28.964Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=111151292704335&w=2 http://secunia.com/advisories/13563	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1413`	vulnerable	2026-06-08 04:47:54.003208	Details available Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature. Published: 2005-02-12T05:00:00.000Z Updated: 2024-08-08T00:53:23.220Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/12037 http://www.gulftech.org/?node=research&article_id=00056-12182004 http://marc.info/?l=bugtraq&m=110352428607171&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/18572	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1412`	vulnerable	2026-06-08 04:47:54.002720	Details available Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary web script or HTML via the searchm parameter. Published: 2005-02-12T05:00:00.000Z Updated: 2024-08-08T00:53:22.805Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/12037 https://exchange.xforce.ibmcloud.com/vulnerabilities/18571 http://www.gulftech.org/?node=research&article_id=00056-12182004 http://marc.info/?l=bugtraq&m=110352428607171&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.