375 matches found
CVE-2006-4539
1 includes/widgets/modulecompanytickets.php and 2 includes/widgets/moduletracktickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier, allows remote attackers to bypass security restrictions and obtain sensitive information via the ticket parameter. NOTE: the...
CVE-2006-4539
1 includes/widgets/modulecompanytickets.php and 2 includes/widgets/moduletracktickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier, allows remote attackers to bypass security restrictions and obtain sensitive information via the ticket parameter. NOTE: the...
CVE-2006-4539
Cerberus Helpdesk 3.2 Build 317 (and possibly earlier) is affected by CVE-2006-4539. The vulnerability arises from two widgets (module_company_tickets.php and module_track_tickets.php) that allow remote attackers to bypass security restrictions and obtain sensitive information via the ticket para...
[SA21706] Cerberus Helpdesk "ticket" Parameter Arbitrary Ticket Access
TITLE: Cerberus Helpdesk "ticket" Parameter Arbitrary Ticket Access SECUNIA ADVISORY ID: SA21706 VERIFY ADVISORY: http://secunia.com/advisories/21706/ CRITICAL: Moderately critical IMPACT: Security Bypass, Exposure of sensitive information WHERE: From remote SOFTWARE: Cerberus Helpdesk 2.x...
cerberusXSS.txt
Inputs in the Cerberus Helpdesk is not properly sanitized, and XSS is possible in a lot of the systems input fields and url parameters. You can add XSS that will hit every user of the system, and even simple scripting tags like alertf is allowed PoC:...
CVE-2006-0509
Multiple cross-site scripting XSS vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via 1 the contactsearch parameter and 2 unspecified url fields...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via 1 the contactsearch parameter and 2 unspecified url fields...
CVE-2006-0509
Multiple cross-site scripting XSS vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via 1 the contactsearch parameter and 2 unspecified url fields...
CVE-2006-0509
CVE-2006-0509 describes multiple cross-site scripting (XSS) vulnerabilities in Cerberus Helpdesk, affecting the files around clients.php (likely in version ~2.7). The vulnerabilities allow remote attackers to inject arbitrary web script or HTML through the parameters contact_search and unspecifie...
Cerberus Helpdesk 2.7 - Clients.php Cross-Site Scripting
Cerberus Helpdesk 2.7 - Clients.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16439/info Cerberus Helpdesk is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage th...
Cerberus Helpdesk vulnerable to XSS
Inputs in the Cerberus Helpdesk is not properly sanitized, and XSS is possible in a lot of the systems input fields and url parameters. You can add XSS that will hit every user of the system, and even simple scripting tags like scriptalert‘f’/script is allowed PoC:...
Cerberus Helpdesk 2.7 - 'Clients.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16439/info Cerberus Helpdesk is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...
CVE-2006-0357
Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command...
Command injection
Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command...
CVE-2006-0357
Cerberus FTP Server 2.32 (and possibly earlier) is affected by a remote DoS flaw: sending a long string that does not contain a valid FTP command can trigger a denial of service. Affected component is Cerberus FTP Server, with the root cause described as an unspecified DoS condition triggered by ...
CVE-2006-0357
Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command...
Cerberus FTP Server 2.32 Denial of Service
Cerberus FTP Server 2.32 Denial of Service Denial of ServiceDoS ------- KAPDA New advisory Vulnerable products : Cerberus FTP Server 2.32 Vendor: http://www.cerberusftp.com/ Risk: High Vulnerabilities: Denial of service Date : -------------------- Found : Aug 21 2005 Vendor Contacted : Aug 21 200...
Cerberus FTP Server DoS
Request flood causes server to crash...
Cerberus FTP Server <= 2.32 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================================== Cerberus FTP Server include include include include define POCSTR "%s" int header; int usagechar filename; int remoteconnect char ip, unsigned short port ; int header printf"\ni KAPDA - Comput...
Cerberus FTP Server 2.32 - Denial of Service
/ Cerberus FTP Server 2.32 Denial of Service original advisory: http://kapda.ir/advisory-210.html cerberus232dosremotexpl.c / include include include include include define POCSTR "%s" int header; int usagechar filename; int remoteconnect char ip, unsigned short port ; int header printf"\ni KAPDA...