Kayako eSupport SQL Injection and Cross-Site-Scripting

Summary
The remote host is running a version of Kayako eSupport which is vulnerable to a SQL injection vulnerability as well as a cross site scripting.
Solution
Upgrade to the newest version of this software