← Database

CVE-2005-2461

MEDIUM CVSS: 6.4 Published: 2005-12-31 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter.

Affected Platforms

Kayako Liveresponse

Weakness Type

NVD-CWE-Other

References