Cerberus Helpdesk 2.649 - display_ticket_thread.php?ticket SQL Injection

Cerberus Helpdesk 2.649 - displayticketthread.php?ticket SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input th...

Cerberus Helpdesk 2.649 - addresses_export.php?queues SQL Injection

Cerberus Helpdesk 2.649 - addressesexport.php?queues SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that...

CVE-2005-4427

Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the 1 fileid parameter to attachmentsend.php, 2 the $addy variable in emailparser.php, 3 $address variable in emailparser.php, 4 $aaddress variable in structs.php, 5 kbid...

CVE-2005-4428

Cross-site scripting XSS vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kbask parameter...

CVE-2005-4427

CVE-2005-4427 corresponds to multiple SQL injection vulnerabilities in Cerberus Helpdesk (a PHP-based web application). The CVE entry covers eight injectable points: (1) file_id in attachment_send.php, (2) $addy in email_parser.php, (3) $address in email_parser.php, (4) $a_address in structs.php,...

CVE-2005-4427

Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the 1 fileid parameter to attachmentsend.php, 2 the $addy variable in emailparser.php, 3 $address variable in emailparser.php, 4 $aaddress variable in structs.php, 5 kbid...

CVE-2005-4428

CVE-2005-4428 documents a cross-site scripting (XSS) vulnerability in Cerberus Helpdesk (index.php) that can be exploited via the query parameter kb_ask . The underlying issue is failure to sanitize user input before reflecting it in dynamically-generated HTML, as described in connected Nessus en...

CVE-2005-4428

Cross-site scripting XSS vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kbask parameter...

[SA17650] Cerberus FTP Server Denial of Service Vulnerability

TITLE: Cerberus FTP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17650 VERIFY ADVISORY: http://secunia.com/advisories/17650/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Cerberus FTP Server 2.x http://secunia.com/product/1585/ DESCRIPTION: A vulnerabilit...

CVE-2005-3502

attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...

CVE-2005-3502

attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...

CVE-2005-3502

The CVE-2005-3502 entry concerns Cerberus Helpdesk: the attachment_send.php component is vulnerable to an unauthorized access flaw where a modified file_id parameter lets remote attackers view attachments and tickets of other users. The available sources confirm the affected product and the acces...

cerberusDownload.txt

------=Part170374079956.1131094279524 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline hi, I have found a vulnerability in cerberus helpdesk latest stable version, caused by insufficient authentication checks and leads to access ...

CVE-2005-1962

Cross-site scripting XSS vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the 1 errorcode parameter to index.php or 2 certain fields to clients.php...

CVE-2005-1963

Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to 1 reports.php, 2 knowledgebase.php, or 3 configuration.php, which leaks the information in a PHP error message...

CVE-2005-1962

Cross-site scripting XSS vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the 1 errorcode parameter to index.php or 2 certain fields to clients.php...

CVE-2005-1963

Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to 1 reports.php, 2 knowledgebase.php, or 3 configuration.php, which leaks the information in a PHP error message...

CVE-2005-1962

The CVE-2005-1962 issue affects Cerberus Helpdesk 0.97.3, describing a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields to clients.php. The provided documents identify th...

CVE-2005-1963

CVE-2005-1963 affects Cerberus Helpdesk 0.97.3. It enables remote attackers to obtain sensitive information by crafting requests to reports.php, knowledgebase.php, or configuration.php, with the leakage exposed in a PHP error message. The available sources confirm an information disclosure vulner...

[SA15641] Cerberus Helpdesk "errorcode" Cross-Site Scripting

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...