Unscored CVE-2007-2562 EUVD-2007-2555GHSA-rr6h-6gx2-wjcq

Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or …

Published May 9, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or HTML via the _m parameter.

References

20070507 Kayako eSupport v3.00.90 Cross Site Scripting (XSS) mailing-list
kayako-esupport-index-xss(34144) vdb-entry
2684 third-party-advisory
36166 vdb-entry