369 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via 1 the contactsearch parameter and 2 unspecified url fields...
CVE-2006-0509
Multiple cross-site scripting XSS vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via 1 the contactsearch parameter and 2 unspecified url fields...
CVE-2006-0509
CVE-2006-0509 describes multiple cross-site scripting (XSS) vulnerabilities in Cerberus Helpdesk, affecting the files around clients.php (likely in version ~2.7). The vulnerabilities allow remote attackers to inject arbitrary web script or HTML through the parameters contact_search and unspecifie...
Cerberus Helpdesk 2.7 - Clients.php Cross-Site Scripting
Cerberus Helpdesk 2.7 - Clients.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16439/info Cerberus Helpdesk is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage th...
Cerberus Helpdesk vulnerable to XSS
Inputs in the Cerberus Helpdesk is not properly sanitized, and XSS is possible in a lot of the systems input fields and url parameters. You can add XSS that will hit every user of the system, and even simple scripting tags like scriptalert‘f’/script is allowed PoC:...
Cerberus Helpdesk 2.7 - 'Clients.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16439/info Cerberus Helpdesk is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...
CVE-2006-0357
Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command...
Command injection
Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command...
CVE-2006-0357
Cerberus FTP Server 2.32 (and possibly earlier) is affected by a remote DoS flaw: sending a long string that does not contain a valid FTP command can trigger a denial of service. Affected component is Cerberus FTP Server, with the root cause described as an unspecified DoS condition triggered by ...
CVE-2006-0357
Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command...
Cerberus FTP Server 2.32 Denial of Service
Cerberus FTP Server 2.32 Denial of Service Denial of ServiceDoS ------- KAPDA New advisory Vulnerable products : Cerberus FTP Server 2.32 Vendor: http://www.cerberusftp.com/ Risk: High Vulnerabilities: Denial of service Date : -------------------- Found : Aug 21 2005 Vendor Contacted : Aug 21 200...
Cerberus FTP Server DoS
Request flood causes server to crash...
Cerberus FTP Server <= 2.32 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================================== Cerberus FTP Server include include include include define POCSTR "%s" int header; int usagechar filename; int remoteconnect char ip, unsigned short port ; int header printf"\ni KAPDA - Comput...
Cerberus FTP Server 2.32 - Denial of Service
/ Cerberus FTP Server 2.32 Denial of Service original advisory: http://kapda.ir/advisory-210.html cerberus232dosremotexpl.c / include include include include include define POCSTR "%s" int header; int usagechar filename; int remoteconnect char ip, unsigned short port ; int header printf"\ni KAPDA...
Cerberus FTP Server <= 2.32 Denial of Service Exploit
No description provided by source. / Cerberus FTP Server 2.32 Denial of Service original advisory: http://kapda.ir/advisory-210.html cerberus232dosremotexpl.c / include stdio.h include sys/socket.h include sys/types.h include netinet/in.h include netdb.h define POCSTR "%s" int header; int usagech...
Cerberus FTP Server 2.32 - Denial of Service
Cerberus FTP Server 2.32 - Denial of Service / Cerberus FTP Server 2.32 Denial of Service original advisory: http://kapda.ir/advisory-210.html cerberus232dosremotexpl.c / include include include include include define POCSTR "%s" int header; int usagechar filename; int remoteconnect char ip,...
Cerberus Helpdesk GUI Agent < 2.7.1 Multiple Remote Vulnerabilities (SQLi, XSS)
The remote host is running Cerberus Helpdesk, a web-based helpdesk suite written in PHP. The installed version of Cerberus Helpdesk is affected by several SQL injection issues and one cross-site scripting flaw because of its failure to sanitize user-supplied input to various parameters and script...
Cerberus Support Center Multiple Remote Vulnerabilities (SQLi, XSS)
The remote host is running Cerberus Support Center, a customer support portal written in PHP. The installed version of Cerberus Support Center is affected by a cross-site scripting flaw due to its failure to sanitize input to the 'kbask' parameter of the 'index.php' script before using it in...
Cerberus Helpdesk 2.649 - cer_KnowledgebaseHandler.class.php?_load_article_details SQL Injection
Cerberus Helpdesk 2.649 - cerKnowledgebaseHandler.class.php?loadarticledetails SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of...
Cerberus Helpdesk 2.649 - 'addresses_export.php?queues' SQL Injection
source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that will be included in site output or in SQL queries. The cross-site...