Multiple Kayako Products Unspecified SQL Injection Vulnerabilitiy
BID:62769
Info
Multiple Kayako Products Unspecified SQL Injection Vulnerabilitiy
| Bugtraq ID: | 62769 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 15 2013 12:00AM |
| Updated: | Jul 15 2013 12:00AM |
| Credit: | Vlad of NetSec Interactive Solutions |
| Vulnerable: |
Kayako Kayako Resolve 4.57 Kayako Kayako Fusion 4.57 Kayako Kayako Fusion 4.51.1891 Kayako Kayako Fusion 4.50.1581 Kayako Kayako Fusion 4.40.1148 Kayako Kayako Fusion 4.40.986 Kayako Kayako Fusion 4.40.959 Kayako Kayako Engage 4.57 |
| Not Vulnerable: |
Kayako Kayako Resolve 4.57.1 Kayako Kayako Fusion 4.57.1 Kayako Kayako Engage 4.57.1 |
Discussion
Multiple Kayako Products Unspecified SQL Injection Vulnerabilitiy
Multiple Kayako Products are prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.
The following are vulnerable:
Versions prior to Kayako Fusion 4.57.1
Versions prior to Kayako Resolve 4.57.1
Versions prior to Kayako Engage 4.57.1
Multiple Kayako Products are prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.
The following are vulnerable:
Versions prior to Kayako Fusion 4.57.1
Versions prior to Kayako Resolve 4.57.1
Versions prior to Kayako Engage 4.57.1
Solution / Fix
Multiple Kayako Products Unspecified SQL Injection Vulnerabilitiy
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.