Kayako eSupport index.php nav Parameter XSS

medium Nessus Plugin ID 16474

Synopsis

The remote web server contains a PHP script that suffers from a cross- site scripting flaw.

Description

The remote host is running Kayako eSupport, a web-based support and help desk application.

This version of eSupport is vulnerable to a cross-site scripting flaw involving the 'nav' parameter of the 'index.php' script. An attacker, exploiting this flaw, would need to be able to coerce an unsuspecting user into visiting a malicious website. Upon successful exploitation, the attacker would be able to steal credentials or execute browser- side code.

Solution

Upgrade to Kayako eSupport version 2.3.5 or later.

See Also

http://forums.kayako.com/threads/esupport-security-vulnerabilities.2765/

https://marc.info/?l=full-disclosure&m=110845724029888&w=2

Plugin Details

Severity: Medium

ID: 16474

File Name: kayako_xss.nasl

Version: 1.24

Type: remote

Published: 2/16/2005

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.7

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: cpe:/a:kayako:esupport

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Vulnerability Publication Date: 2/16/2005

Reference Information

CVE: CVE-2005-0487

BID: 12563

CWE: 20, 442, 629, 711, 712, 722, 725, 74, 750, 751, 79, 800, 801, 809, 811, 864, 900, 928, 931, 990