Unrated severityNVD Advisory· Published Oct 6, 2009· Updated Jun 16, 2026
CVE-2009-3567
CVE-2009-3567
Description
Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145.
Affected products
21cpe:2.3:a:kayako:esupport:*:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:kayako:esupport:*:*:*:*:*:*:*:*range: <=3.60.04
- cpe:2.3:a:kayako:esupport:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:esupport:2.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:esupport:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:esupport:2.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:esupport:2.3:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:esupport:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:esupport:3.00.13:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:esupport:3.00.90:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:esupport:3.04.10:*:*:*:*:*:*:*
- (no CPE)range: <=3.60.04
cpe:2.3:a:kayako:supportsuite:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:kayako:supportsuite:*:*:*:*:*:*:*:*range: <=3.60.04
- cpe:2.3:a:kayako:supportsuite:3.00.26:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:supportsuite:3.00.32:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:supportsuite:3.10.00:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:supportsuite:3.10.02:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:supportsuite:3.11.00:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:supportsuite:3.11.01:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:supportsuite:3.20.02:*:*:*:*:*:*:*
- cpe:2.3:a:kayako:supportsuite:3.50.06:*:*:*:*:*:*:*
- (no CPE)range: <=3.60.04
Patches
Vulnerability mechanics
References
5- blog.kayako.com/2009/09/security-bulletin-supportsuite-and-esupport/nvdPatchVendor Advisory
- secunia.com/advisories/36807nvdVendor Advisory
- osvdb.org/58516nvd
- www.securityfocus.com/bid/36568nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/53558nvd
News mentions
0No linked articles in our index yet.