CVE:CVE-2008-0395
CNNVD:CNNVD-200801-344
Kayako SupportSuite 3.11.01会允许远程攻击者通过一个对syncml/index.php($_SERVER superglobal的组成内容)直接的请求来获得服务器配置信息。
solution:Upgrade kayako supportsuite to a higher version than 3.11.01,and avoid the version 3.11.01