5
CVE-2005-4638
- EPSS 1.38%
- Veröffentlicht 31.12.2005 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:19:09
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginindex.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in the news module, (3) downloaditemid parameter in the downloads module, and (4) kbarticleid parameter in the knowledgebase module.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kayako ≫ Supportsuite Version <= 3.00.26
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.38% | 0.685 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html
http://www.osvdb.org/22226
https://exchange.xforce.ibmcloud.com/vulnerabilities/23917