CVE-2008-3701: Kayako Supportsuite

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitrary SQL commands via the customfieldlinkid parameter in a delcflink action.

Affected products

• Kayako Supportsuite: up to and including 3.20.02; version 3.10.00 only; version 3.10.02 only; version 3.11.00 only; version 3.11.01 only

Published 2008-08-15. Last modified 2026-06-16.