CVEvulnerability

CVE-2006-4011

2.6 LOW Published 2006-08-07 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2006-08-07
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N

Description

PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter.

Affected configurations

• kayako esupport 2.3 • kayako esupport 2.3.1

References

http://secunia.com/advisories/21330 Vendor Advisory
http://www.securityfocus.com/bid/19315 Exploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/28199 exchange.xforce.ibmcloud.com
https://www.exploit-db.com/exploits/2115 www.exploit-db.com
http://secunia.com/advisories/21330 Vendor Advisory
http://www.securityfocus.com/bid/19315 Exploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/28199 exchange.xforce.ibmcloud.com
https://www.exploit-db.com/exploits/2115 www.exploit-db.com