kayako kayıtları
kayako üreticisine ait 26 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-400 Uncontrolled Resource Consumption1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
26 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2010-2911Kavram kanıtı | SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the newsidkayako · esupport · CWE-89 | Yüksek7,5 | — | %1,0 | 28 Tem 2010 |
30İzleyin | CVE-2010-2912Kavram kanıtı | SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the _a parkayako · esupport · CWE-89 | Yüksek7,5 | — | %0,9 | 28 Tem 2010 |
27İzleyin | CVE-2008-3701Kavram kanıtı | SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitkayako · supportsuite · CWE-89 | Orta6,5 | — | %1,9 | 15 Ağu 2008 |
27İzleyin | CVE-2005-0487İstismar yok | Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to injkayako · esupport | Orta6,8 | — | %1,2 | 30 Mar 2005 |
26İzleyin | CVE-2005-2461Kavram kanıtı | Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL cokayako · liveresponse | Orta6,4 | — | %2,2 | 31 Ara 2005 |
25İzleyin | CVE-2005-2463İstismar yok | Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include sckayako · liveresponse | Orta6,4 | — | %1,4 | 31 Ara 2005 |
24İzleyin | CVE-2005-2460Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTMLkayako · liveresponse | Orta5,8 | — | %4,0 | 31 Ara 2005 |
20İzleyin | CVE-2005-4638İstismar yok | index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in kayako · supportsuite | Orta5,0 | — | %1,4 | 31 Ara 2005 |
20İzleyin | CVE-2008-0395İstismar yok | Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, whikayako · supportsuite · CWE-200 | Orta5,0 | — | %1,2 | 23 Oca 2008 |
20İzleyin | CVE-2004-1413Kavram kanıtı | Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (kayako · esupport | Orta5,0 | — | %1,0 | 31 Ara 2004 |
18İzleyin | CVE-2008-3700Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary wekayako · supportsuite · CWE-79 | Orta4,3 | — | %4,1 | 15 Ağu 2008 |
18İzleyin | CVE-2005-0842Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML kayako · esupport | Orta4,3 | — | %2,6 | 2 May 2005 |
18İzleyin | CVE-2012-3233Kavram kanıtı | Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako Fusion 4.40.1148, akayako · fusion · CWE-79 | Orta4,3 | — | %2,0 | 15 Eyl 2012 |
18İzleyin | CVE-2007-1145İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject akayako · esupport · CWE-79 | Orta4,3 | — | %1,9 | 2 Mar 2007 |
18İzleyin | CVE-2005-4637Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to injectkayako · supportsuite | Orta4,3 | — | %1,7 | 31 Ara 2005 |
18İzleyin | CVE-2004-1412Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary web script or HTML kayako · esupport | Orta4,3 | — | %1,7 | 31 Ara 2004 |
18İzleyin | CVE-2006-5825Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script kayako · supportsuite | Orta4,3 | — | %1,6 | 9 Kas 2006 |
17İzleyin | CVE-2008-4761Kavram kanıtı | Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote akayako · esupport · CWE-79 | Orta4,3 | — | %1,4 | 27 Eki 2008 |
17İzleyin | CVE-2012-4872İstismar yok | Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web kayako · kayako fusion · CWE-79 | Orta4,3 | — | %1,2 | 6 Eyl 2012 |
17İzleyin | CVE-2009-3567İstismar yok | Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier kayako · esupport · CWE-79 | Orta4,3 | — | %1,0 | 6 Eki 2009 |
17İzleyin | CVE-2009-3427İstismar yok | Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via tkayako · supportsuite · CWE-79 | Orta4,3 | — | %1,0 | 25 Eyl 2009 |
17İzleyin | CVE-2007-2562İstismar yok | Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or Hkayako · esupport | Orta4,3 | — | %1,0 | 9 May 2007 |
17İzleyin | CVE-2022-35913İstismar yok | Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin.kayako · samourai · CWE-400 | Orta4,3 | — | %0,7 | 6 Eyl 2022 |
14İzleyin | CVE-2010-0460İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticatedkayako · esupport · CWE-79 | Düşük3,5 | — | %1,0 | 28 Oca 2010 |
11İzleyin | CVE-2006-4011Kavram kanıtı | PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enablkayako · esupport | Düşük2,6 | — | %2,1 | 7 Ağu 2006 |
- CVE-2010-291130İzleyin
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the newsid
YüksekCVSS 7,5Kavram kanıtıEPSS %1kayako · esupport28 Tem 2010
- CVE-2010-291230İzleyin
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the _a par
YüksekCVSS 7,5Kavram kanıtıEPSS %0kayako · esupport28 Tem 2010
- CVE-2008-370127İzleyin
SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbit
OrtaCVSS 6,5Kavram kanıtıEPSS %1kayako · supportsuite15 Ağu 2008
- CVE-2005-048727İzleyin
Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inj
OrtaCVSS 6,8İstismar yokEPSS %1kayako · esupport30 Mar 2005
- CVE-2005-246126İzleyin
Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL co
OrtaCVSS 6,4Kavram kanıtıEPSS %2kayako · liveresponse31 Ara 2005
- CVE-2005-246325İzleyin
Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include sc
OrtaCVSS 6,4İstismar yokEPSS %1kayako · liveresponse31 Ara 2005
- CVE-2005-246024İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML
OrtaCVSS 5,8Kavram kanıtıEPSS %4kayako · liveresponse31 Ara 2005
- CVE-2005-463820İzleyin
index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in
OrtaCVSS 5,0İstismar yokEPSS %1kayako · supportsuite31 Ara 2005
- CVE-2008-039520İzleyin
Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, whi
OrtaCVSS 5,0İstismar yokEPSS %1kayako · supportsuite23 Oca 2008
- CVE-2004-141320İzleyin
Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (
OrtaCVSS 5,0Kavram kanıtıEPSS %1kayako · esupport31 Ara 2004
- CVE-2008-370018İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary we
OrtaCVSS 4,3Kavram kanıtıEPSS %4kayako · supportsuite15 Ağu 2008
- CVE-2005-084218İzleyin
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3Kavram kanıtıEPSS %2kayako · esupport2 May 2005
- CVE-2012-323318İzleyin
Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako Fusion 4.40.1148, a
OrtaCVSS 4,3Kavram kanıtıEPSS %2kayako · fusion15 Eyl 2012
- CVE-2007-114518İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject a
OrtaCVSS 4,3İstismar yokEPSS %1kayako · esupport2 Mar 2007
- CVE-2005-463718İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to inject
OrtaCVSS 4,3Kavram kanıtıEPSS %1kayako · supportsuite31 Ara 2005
- CVE-2004-141218İzleyin
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3Kavram kanıtıEPSS %1kayako · esupport31 Ara 2004
- CVE-2006-582518İzleyin
Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script
OrtaCVSS 4,3Kavram kanıtıEPSS %1kayako · supportsuite9 Kas 2006
- CVE-2008-476117İzleyin
Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote a
OrtaCVSS 4,3Kavram kanıtıEPSS %1kayako · esupport27 Eki 2008
- CVE-2012-487217İzleyin
Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web
OrtaCVSS 4,3İstismar yokEPSS %1kayako · kayako fusion6 Eyl 2012
- CVE-2009-356717İzleyin
Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier
OrtaCVSS 4,3İstismar yokEPSS %1kayako · esupport6 Eki 2009
- CVE-2009-342717İzleyin
Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via t
OrtaCVSS 4,3İstismar yokEPSS %1kayako · supportsuite25 Eyl 2009
- CVE-2007-256217İzleyin
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or H
OrtaCVSS 4,3İstismar yokEPSS %1kayako · esupport9 May 2007
- CVE-2022-3591317İzleyin
Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin.
OrtaCVSS 4,3İstismar yokEPSS %0kayako · samourai6 Eyl 2022
- CVE-2010-046014İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated
DüşükCVSS 3,5İstismar yokEPSS %1kayako · esupport28 Oca 2010
- CVE-2006-401111İzleyin
PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enabl
DüşükCVSS 2,6Kavram kanıtıEPSS %2kayako · esupport7 Ağu 2006