CVE-2005-4638 | BDVDB-2026-14489 Detail

Description#

index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in the news module, (3) downloaditemid parameter in the downloads module, and (4) kbarticleid parameter in the knowledgebase module.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html
http://www.osvdb.org/22226
https://exchange.xforce.ibmcloud.com/vulnerabilities/23917

Exploit#

No public exploit known

History#

Version 12006-01-09Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.