Lucene search
HistoryJun 06, 2006 - 8:03 p.m.
CVE-2005-2460
kayako
liveresponse
xss
vulnerability
web script
html
username
name
injection
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
83.2%
Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter or (2) name field when entering a session or sending a message.
Affected configurations
Node
kayakoliveresponseMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| kayako:liveresponse | kayako liveresponse | eq | 2.0 |
Related
cvelist
cvelist
CVE-2005-2460
2006-06-06 20:03:00
nvd
nvd
CVE-2005-2460
2005-12-31 05:00:00
nessus
nessus
Kayako LiveResponse Multiple Vulnerabilities
2005-08-01 00:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
83.2%
Related for CVE-2005-2460