← Database

CVE-2004-1413

MEDIUM CVSS: 5.0 Published: 2004-12-31 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature.

Affected Platforms

Kayako Esupport

Weakness Type

NVD-CWE-Other

References