Approved changes feed: RSS · Atom

cpe:2.3:a:kayako:esupport:2.3.1:*:*:*:*:*:*:*

part: a version: 2.3.1 update: *

VendorKayako (9930d4b4-fdc0-5de7-ab36-6a6be5576466)
ProductEsupport (1df945eb-5444-5b07-810b-09ba3077aab1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3567 vulnerable 2026-06-08 04:51:42.688884 Details available
Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145.
Published: 2009-10-06T20:19:00.000Z
Updated: 2024-08-07T06:31:10.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4011 vulnerable 2026-06-08 04:49:10.700711 Details available
PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter.
Published: 2006-08-07T19:00:00.000Z
Updated: 2024-08-07T18:48:39.451Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0487 vulnerable 2026-06-08 04:48:12.800652 Details available
Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter.
Published: 2005-02-19T05:00:00.000Z
Updated: 2024-08-07T21:13:54.278Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.