Description
Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by GulfTech Security · textwebappsphp
https://www.exploit-db.com/exploits/26052
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/14425
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112274359718863&w=2
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/16286
Various Sources x_refsource_misc
http://www.gulftech.org/?node=research&article_id=00092-07302005
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/18396
Scores
EPSS
0.0054
EPSS Percentile
67.8%
Details
Status
published
Products (1)
kayako/liveresponse
2.0
Published
Dec 31, 2005
Tracked Since
Feb 18, 2026