Записи kayako
26 опубликованных записей вендора kayako.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 5
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-400 Uncontrolled Resource Consumption1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
26 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
30Наблюдать | CVE-2010-2911Proof of concept | SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the newsidkayako · esupport · CWE-89 | Высокая7,5 | — | 1,0 % | 28 июл. 2010 г. |
30Наблюдать | CVE-2010-2912Proof of concept | SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the _a parkayako · esupport · CWE-89 | Высокая7,5 | — | 0,9 % | 28 июл. 2010 г. |
27Наблюдать | CVE-2008-3701Proof of concept | SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitkayako · supportsuite · CWE-89 | Средняя6,5 | — | 1,9 % | 15 авг. 2008 г. |
27Наблюдать | CVE-2005-0487Эксплойта нет | Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to injkayako · esupport | Средняя6,8 | — | 1,2 % | 30 мар. 2005 г. |
26Наблюдать | CVE-2005-2461Proof of concept | Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL cokayako · liveresponse | Средняя6,4 | — | 2,2 % | 31 дек. 2005 г. |
25Наблюдать | CVE-2005-2463Эксплойта нет | Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include sckayako · liveresponse | Средняя6,4 | — | 1,4 % | 31 дек. 2005 г. |
24Наблюдать | CVE-2005-2460Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTMLkayako · liveresponse | Средняя5,8 | — | 4,0 % | 31 дек. 2005 г. |
20Наблюдать | CVE-2005-4638Эксплойта нет | index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in kayako · supportsuite | Средняя5,0 | — | 1,4 % | 31 дек. 2005 г. |
20Наблюдать | CVE-2008-0395Эксплойта нет | Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, whikayako · supportsuite · CWE-200 | Средняя5,0 | — | 1,2 % | 23 янв. 2008 г. |
20Наблюдать | CVE-2004-1413Proof of concept | Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (kayako · esupport | Средняя5,0 | — | 1,0 % | 31 дек. 2004 г. |
18Наблюдать | CVE-2008-3700Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary wekayako · supportsuite · CWE-79 | Средняя4,3 | — | 4,1 % | 15 авг. 2008 г. |
18Наблюдать | CVE-2005-0842Proof of concept | Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML kayako · esupport | Средняя4,3 | — | 2,6 % | 2 мая 2005 г. |
18Наблюдать | CVE-2012-3233Proof of concept | Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako Fusion 4.40.1148, akayako · fusion · CWE-79 | Средняя4,3 | — | 2,0 % | 15 сент. 2012 г. |
18Наблюдать | CVE-2007-1145Эксплойта нет | Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject akayako · esupport · CWE-79 | Средняя4,3 | — | 1,9 % | 2 мар. 2007 г. |
18Наблюдать | CVE-2005-4637Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to injectkayako · supportsuite | Средняя4,3 | — | 1,7 % | 31 дек. 2005 г. |
18Наблюдать | CVE-2004-1412Proof of concept | Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary web script or HTML kayako · esupport | Средняя4,3 | — | 1,7 % | 31 дек. 2004 г. |
18Наблюдать | CVE-2006-5825Proof of concept | Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script kayako · supportsuite | Средняя4,3 | — | 1,6 % | 9 нояб. 2006 г. |
17Наблюдать | CVE-2008-4761Proof of concept | Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote akayako · esupport · CWE-79 | Средняя4,3 | — | 1,4 % | 27 окт. 2008 г. |
17Наблюдать | CVE-2012-4872Эксплойта нет | Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web kayako · kayako fusion · CWE-79 | Средняя4,3 | — | 1,2 % | 6 сент. 2012 г. |
17Наблюдать | CVE-2009-3567Эксплойта нет | Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier kayako · esupport · CWE-79 | Средняя4,3 | — | 1,0 % | 6 окт. 2009 г. |
17Наблюдать | CVE-2009-3427Эксплойта нет | Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via tkayako · supportsuite · CWE-79 | Средняя4,3 | — | 1,0 % | 25 сент. 2009 г. |
17Наблюдать | CVE-2007-2562Эксплойта нет | Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or Hkayako · esupport | Средняя4,3 | — | 1,0 % | 9 мая 2007 г. |
17Наблюдать | CVE-2022-35913Эксплойта нет | Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin.kayako · samourai · CWE-400 | Средняя4,3 | — | 0,7 % | 6 сент. 2022 г. |
14Наблюдать | CVE-2010-0460Эксплойта нет | Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticatedkayako · esupport · CWE-79 | Низкая3,5 | — | 1,0 % | 28 янв. 2010 г. |
11Наблюдать | CVE-2006-4011Proof of concept | PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enablkayako · esupport | Низкая2,6 | — | 2,1 % | 7 авг. 2006 г. |
- CVE-2010-291130Наблюдать
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the newsid
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %kayako · esupport28 июл. 2010 г.
- CVE-2010-291230Наблюдать
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the _a par
ВысокаяCVSS 7,5Proof of conceptEPSS 0 %kayako · esupport28 июл. 2010 г.
- CVE-2008-370127Наблюдать
SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbit
СредняяCVSS 6,5Proof of conceptEPSS 1 %kayako · supportsuite15 авг. 2008 г.
- CVE-2005-048727Наблюдать
Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inj
СредняяCVSS 6,8Эксплойта нетEPSS 1 %kayako · esupport30 мар. 2005 г.
- CVE-2005-246126Наблюдать
Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL co
СредняяCVSS 6,4Proof of conceptEPSS 2 %kayako · liveresponse31 дек. 2005 г.
- CVE-2005-246325Наблюдать
Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include sc
СредняяCVSS 6,4Эксплойта нетEPSS 1 %kayako · liveresponse31 дек. 2005 г.
- CVE-2005-246024Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML
СредняяCVSS 5,8Proof of conceptEPSS 4 %kayako · liveresponse31 дек. 2005 г.
- CVE-2005-463820Наблюдать
index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in
СредняяCVSS 5,0Эксплойта нетEPSS 1 %kayako · supportsuite31 дек. 2005 г.
- CVE-2008-039520Наблюдать
Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, whi
СредняяCVSS 5,0Эксплойта нетEPSS 1 %kayako · supportsuite23 янв. 2008 г.
- CVE-2004-141320Наблюдать
Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (
СредняяCVSS 5,0Proof of conceptEPSS 1 %kayako · esupport31 дек. 2004 г.
- CVE-2008-370018Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary we
СредняяCVSS 4,3Proof of conceptEPSS 4 %kayako · supportsuite15 авг. 2008 г.
- CVE-2005-084218Наблюдать
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML
СредняяCVSS 4,3Proof of conceptEPSS 2 %kayako · esupport2 мая 2005 г.
- CVE-2012-323318Наблюдать
Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako Fusion 4.40.1148, a
СредняяCVSS 4,3Proof of conceptEPSS 2 %kayako · fusion15 сент. 2012 г.
- CVE-2007-114518Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject a
СредняяCVSS 4,3Эксплойта нетEPSS 1 %kayako · esupport2 мар. 2007 г.
- CVE-2005-463718Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to inject
СредняяCVSS 4,3Proof of conceptEPSS 1 %kayako · supportsuite31 дек. 2005 г.
- CVE-2004-141218Наблюдать
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary web script or HTML
СредняяCVSS 4,3Proof of conceptEPSS 1 %kayako · esupport31 дек. 2004 г.
- CVE-2006-582518Наблюдать
Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script
СредняяCVSS 4,3Proof of conceptEPSS 1 %kayako · supportsuite9 нояб. 2006 г.
- CVE-2008-476117Наблюдать
Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote a
СредняяCVSS 4,3Proof of conceptEPSS 1 %kayako · esupport27 окт. 2008 г.
- CVE-2012-487217Наблюдать
Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web
СредняяCVSS 4,3Эксплойта нетEPSS 1 %kayako · kayako fusion6 сент. 2012 г.
- CVE-2009-356717Наблюдать
Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier
СредняяCVSS 4,3Эксплойта нетEPSS 1 %kayako · esupport6 окт. 2009 г.
- CVE-2009-342717Наблюдать
Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via t
СредняяCVSS 4,3Эксплойта нетEPSS 1 %kayako · supportsuite25 сент. 2009 г.
- CVE-2007-256217Наблюдать
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or H
СредняяCVSS 4,3Эксплойта нетEPSS 1 %kayako · esupport9 мая 2007 г.
- CVE-2022-3591317Наблюдать
Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin.
СредняяCVSS 4,3Эксплойта нетEPSS 0 %kayako · samourai6 сент. 2022 г.
- CVE-2010-046014Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated
НизкаяCVSS 3,5Эксплойта нетEPSS 1 %kayako · esupport28 янв. 2010 г.
- CVE-2006-401111Наблюдать
PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enabl
НизкаяCVSS 2,6Proof of conceptEPSS 2 %kayako · esupport7 авг. 2006 г.