Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3701. PoCs published by GulfTech Security.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in Kayako SupportSuite. It uses a UNION-based SQLi to extract the first character of the admin password via a time-based blind technique (BENCHMARK).
Description
SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitrary SQL commands via the customfieldlinkid parameter in a delcflink action.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in Kayako SupportSuite. It uses a UNION-based SQLi to extract the first character of the admin password via a time-based blind technique (BENCHMARK).