CVE-2010-2911

Description

References

• packetstormsecurity.org/1007-exploits/kayakoesupport37002-sql.txt · Exploit
• exploit-db.com/exploits/14392 · Exploit
• securityfocus.com/bid/41779 · Exploit
• vupen.com/english/advisories/2010/1843 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/60455

esupport의 다른 취약점

• CVE-2010-2912높음 7.5SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the _a par…
• CVE-2010-0460낮음 3.5Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated…
• CVE-2009-3567보통 4.3Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier …
• CVE-2008-4761보통 4.3Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote a…
• CVE-2007-2562보통 4.3Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or H…