CVE-2009-3427 | BDVDB-2026-38692 Detail

Description#

Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/505637/100/0/threaded
http://www.ngenuity.org/wordpress/2009/08/08/ngenuity-ticket-subject-persistent-xss-in-kayako-supportsuite/
http://secunia.com/advisories/36253

Exploit#

No public exploit known

History#

Version 12009-09-25Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.