VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 15, 2008· Updated Apr 23, 2026

CVE-2008-3701

CVE-2008-3701

Description

SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitrary SQL commands via the customfieldlinkid parameter in a delcflink action.

Affected products

5
  • Kayako/Supportsuite5 versions
    cpe:2.3:a:kayako:supportsuite:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:kayako:supportsuite:*:*:*:*:*:*:*:*range: <=3.20.02
    • cpe:2.3:a:kayako:supportsuite:3.10.00:*:*:*:*:*:*:*
    • cpe:2.3:a:kayako:supportsuite:3.10.02:*:*:*:*:*:*:*
    • cpe:2.3:a:kayako:supportsuite:3.11.00:*:*:*:*:*:*:*
    • cpe:2.3:a:kayako:supportsuite:3.11.01:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.