Approved changes feed: RSS · Atom

cpe:2.3:a:kayako:esupport:3.00.13:*:*:*:*:*:*:*

part: a version: 3.00.13 update: *

VendorKayako (9930d4b4-fdc0-5de7-ab36-6a6be5576466)
ProductEsupport (1df945eb-5444-5b07-810b-09ba3077aab1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3567 vulnerable 2026-06-08 04:51:42.689690 Details available
Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145.
Published: 2009-10-06T20:19:00.000Z
Updated: 2024-08-07T06:31:10.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1145 vulnerable 2026-06-08 04:49:41.546362 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a (1) lostpassword or (2) register action in index.php, (3) unspecified vectors in the Submit form in a submit action in index.php, and (4) the user's name in index.php; and (5) allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the Admin and Staff Control Panel. NOTE: this might issue overlap CVE-2004-1412, CVE-2005-0487, or CVE-2005-0842.
Published: 2007-02-27T18:00:00.000Z
Updated: 2024-08-07T12:43:22.551Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.