What’s Vulnerable › Vulnerabilities

CVE-2005-0487

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-03-30 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter.

Affected products

• Kayako Esupport: 2.3.1

References

• http://marc.info/?l=full-disclosure&m=110845724029888&w=2
• http://www.securityfocus.com/bid/12563
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18571
• http://marc.info/?l=full-disclosure&m=110845724029888&w=2
• http://www.securityfocus.com/bid/12563
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18571

Get alerted when CVE-2005-0487 or the next vulnerability affects your stack