CVE-2009-3427

概要

参考情報

• secunia.com/advisories/36253 · Vendor Advisory
• ngenuity.org/wordpress/2009/08/08/ngenuity-ticket-subject-persistent-xss-in-kayako-supportsuite · Exploit
• securityfocus.com/archive/1/505637/100/0/threaded

supportsuite のその他の脆弱性

• CVE-2010-0460低 3.5Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated…
• CVE-2009-3567中 4.3Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier …
• CVE-2008-3701中 6.5SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbit…
• CVE-2008-3700中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary we…
• CVE-2008-0395中 5.0Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, whi…