CVE-2010-0460: XSS
First published: Thu Jan 28 2010(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the (1) subject parameter and (2) contents parameter (aka body) in an insertquestion action. NOTE: some of these details are obtained from third party information.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kayako eSupport | <=3.60.04 | |
| Kayako SupportSuite | =3.0 | |
| Kayako SupportSuite | =3.30-rc2 | |
| Kayako SupportSuite | =3.10.00 | |
| Kayako SupportSuite | =3.00.32 | |
| Kayako SupportSuite | =3.20.02 | |
| Kayako SupportSuite | =3.50.06 | |
| Kayako SupportSuite | =3.00.26 | |
| Kayako SupportSuite | =3.11.01 | |
| Kayako SupportSuite | =3.30-rc3 | |
| Kayako SupportSuite | =3.11.00 | |
| Kayako SupportSuite | =3.10.02 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/author
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/type
- agent/references
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/kayako
- canonical/kayako esupport
- version/kayako esupport/3.60.04
- canonical/kayako supportsuite
- version/kayako supportsuite/3.0
- version/kayako supportsuite/3.30-rc2
- version/kayako supportsuite/3.10.00
- version/kayako supportsuite/3.00.32
- version/kayako supportsuite/3.20.02
- version/kayako supportsuite/3.50.06
- version/kayako supportsuite/3.00.26
- version/kayako supportsuite/3.11.01
- version/kayako supportsuite/3.30-rc3
- version/kayako supportsuite/3.11.00
- version/kayako supportsuite/3.10.02