CVE-2004-1413

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature.

Affected products

Kayako Esupport: 2.1.2, 2.1.8, 2.2, 2.2.5, 2.3

References

http://marc.info/?l=bugtraq&m=110352428607171&w=2
http://www.gulftech.org/?node=research&article_id=00056-12182004
http://www.securityfocus.com/bid/12037
https://exchange.xforce.ibmcloud.com/vulnerabilities/18572
http://marc.info/?l=bugtraq&m=110352428607171&w=2
http://www.gulftech.org/?node=research&article_id=00056-12182004
http://www.securityfocus.com/bid/12037
https://exchange.xforce.ibmcloud.com/vulnerabilities/18572

Get alerted when CVE-2004-1413 or the next vulnerability affects your stack