CVE-2010-2912

Description

References

• packetstormsecurity.org/1007-exploits/kayakoesupport-sql.txt · Exploit
• exploit-db.com/exploits/14404 · Exploit
• securityfocus.com/bid/41756 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/60457

esupport의 다른 취약점

• CVE-2010-2911높음 7.5SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the newsid…
• CVE-2010-0460낮음 3.5Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated…
• CVE-2009-3567보통 4.3Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier …
• CVE-2008-4761보통 4.3Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote a…
• CVE-2007-2562보통 4.3Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or H…