CVE-2010-2911

概要

参考情報

• packetstormsecurity.org/1007-exploits/kayakoesupport37002-sql.txt · Exploit
• exploit-db.com/exploits/14392 · Exploit
• securityfocus.com/bid/41779 · Exploit
• vupen.com/english/advisories/2010/1843 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/60455

esupport のその他の脆弱性

• CVE-2010-2912高 7.5SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the _a par…
• CVE-2010-0460低 3.5Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated…
• CVE-2009-3567中 4.3Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier …
• CVE-2008-4761中 4.3Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote a…
• CVE-2007-2562中 4.3Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or H…