CVE-2005-2460

EPSS 4.0%

Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter or (2) name field when entering a session or sending a message.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/26051unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=112274359718863&w=2 http://secunia.com/advisories/16286 http://www.gulftech.org/?node=research&article_id=00092-07302005 http://www.osvdb.org/18395 http://www.osvdb.org/18397 http://www.securityfocus.com/bid/14425