CVE-2008-4761

Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue is probably in the HTMLArea HTMLTidy (HTML Tidy) plugin, not eSupport.

• CWE-79

• http://downloads.securityfocus.com/vulnerabilities/exploits/31908.htmlExploit
• http://www.openwall.com/lists/oss-security/2008/10/27/6
• http://www.securityfocus.com/bid/31908
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46097
• http://downloads.securityfocus.com/vulnerabilities/exploits/31908.htmlExploit
• http://www.openwall.com/lists/oss-security/2008/10/27/6
• http://www.securityfocus.com/bid/31908
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46097

Published

Oct 28, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4755SQL injection vulnerability in gotourl.php in PozScripts Cla…
• CVE-2008-4756Cross-site scripting (XSS) vulnerability in add_prest_date.p…
• CVE-2008-4757Multiple SQL injection vulnerabilities in PHP-Daily allow re…
• CVE-2008-4758Directory traversal vulnerability in download_file.php in PH…
• CVE-2008-4759Directory traversal vulnerability in download.php in BuzzyWa…
• CVE-2008-4760SQL injection vulnerability in lecture.php in Graphiks MyFor…
• CVE-2008-4762Stack-based buffer overflow in freeSSHd 1.2.1 allows remote …
• CVE-2008-4763Multiple cross-site scripting (XSS) vulnerabilities in sampl…
• CVE-2008-4764Directory traversal vulnerability in the eXtplorer module (c…
• CVE-2008-4765SQL injection vulnerability in pollBooth.php in osCommerce P…
• CVE-2008-4766SQL injection vulnerability in member.php in Oxygen Bulletin…
• CVE-2008-4767Unrestricted file upload vulnerability in the DownloadsPlus …