CVE-2009-3567

Published: Oct 6, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145.

Affected (19)

Products: Kayako: Esupport, Supportsuite

Kayako

2 products

Esupport

Supportsuite

Configuration A

19 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Kayako Esupport	Up to 3.60.04
Kayako Esupport	Version 2.1.2
Kayako Esupport	Version 2.1.8
Kayako Esupport	Version 2.2.5
Kayako Esupport	Version 2.2
Kayako Esupport	Version 2.3.1
Kayako Esupport	Version 2.3
Kayako Esupport	Version 3.00.13
Kayako Esupport	Version 3.00.90
Kayako Esupport	Version 3.04.10
Kayako Supportsuite	Up to 3.60.04
Kayako Supportsuite	Version 3.00.26
Kayako Supportsuite	Version 3.00.32
Kayako Supportsuite	Version 3.10.00
Kayako Supportsuite	Version 3.10.02
Kayako Supportsuite	Version 3.11.00
Kayako Supportsuite	Version 3.11.01
Kayako Supportsuite	Version 3.20.02
Kayako Supportsuite	Version 3.50.06