Security Advisory

CVE-2008-3701

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-08-15 20:06:00

Last updated 2024-08-07 09:45:19

Assigner mitre

State PUBLISHED

Description

SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitrary SQL commands via the customfieldlinkid parameter in a delcflink action.

← Browse all CVEs View on cve.org ↗