CVE-2004-1413: Kayako Esupport

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature.

Affected products

• Kayako Esupport: version 2.1.2 only; version 2.1.8 only; version 2.2 only; version 2.2.5 only; version 2.3 only

Published 2004-12-31. Last modified 2026-06-16.