CVE-2008-0395: Kayako Supportsuite

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $_SERVER superglobal.

Affected products

• Kayako Supportsuite: version 3.11.01 only

Published 2008-01-23. Last modified 2026-06-16.