Cerberus Helpdesk 2.649 - display_ticket_thread.php?ticket SQL Injection

Cerberus Helpdesk 2.649 - displayticketthread.php?ticket SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input th...

Cerberus Help Desk < 2.7.0 Multiple Vulnerabilities

Binary data 3337.prm...

Cerberus Helpdesk 2.649 - 'display_ticket_thread.php?ticket' SQL Injection

source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that will be included in site output or in SQL queries. The cross-site...

cerberusHelp.txt

Title: Cerberus Helpdesk multiple vulnerabilities. Severity: Medium Affected: cerberus-gui 2.649, support-center 2.6493.2.0pr2 Problem type: remote Author: Alejandro Ramos Description: ------------------------------------------------------------------------------- Cerberus Helpdesk is a WebGroup...

Cerberus Helpdesk 2.649 - addresses_export.php?queues SQL Injection

Cerberus Helpdesk 2.649 - addressesexport.php?queues SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that...

Cerberus Helpdesk 2.649 - 'cer_KnowledgebaseHandler.class.php?_load_article_details' SQL Injection

source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that will be included in site output or in SQL queries. The cross-site...

CVE-2005-4427

Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the 1 fileid parameter to attachmentsend.php, 2 the $addy variable in emailparser.php, 3 $address variable in emailparser.php, 4 $aaddress variable in structs.php, 5 kbid...

CVE-2005-4428

Cross-site scripting XSS vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kbask parameter...

CVE-2005-4427

CVE-2005-4427 corresponds to multiple SQL injection vulnerabilities in Cerberus Helpdesk (a PHP-based web application). The CVE entry covers eight injectable points: (1) file_id in attachment_send.php, (2) $addy in email_parser.php, (3) $address in email_parser.php, (4) $a_address in structs.php,...

CVE-2005-4427

Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the 1 fileid parameter to attachmentsend.php, 2 the $addy variable in emailparser.php, 3 $address variable in emailparser.php, 4 $aaddress variable in structs.php, 5 kbid...

CVE-2005-4428

Cross-site scripting XSS vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kbask parameter...

CVE-2005-4428

CVE-2005-4428 documents a cross-site scripting (XSS) vulnerability in Cerberus Helpdesk (index.php) that can be exploited via the query parameter kb_ask . The underlying issue is failure to sanitize user input before reflecting it in dynamically-generated HTML, as described in connected Nessus en...

[SA17650] Cerberus FTP Server Denial of Service Vulnerability

TITLE: Cerberus FTP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17650 VERIFY ADVISORY: http://secunia.com/advisories/17650/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Cerberus FTP Server 2.x http://secunia.com/product/1585/ DESCRIPTION: A vulnerabilit...

CVE-2005-3502

attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...

CVE-2005-3502

attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...

CVE-2005-3502

The CVE-2005-3502 entry concerns Cerberus Helpdesk: the attachment_send.php component is vulnerable to an unauthorized access flaw where a modified file_id parameter lets remote attackers view attachments and tickets of other users. The available sources confirm the affected product and the acces...

cerberusDownload.txt

------=Part170374079956.1131094279524 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline hi, I have found a vulnerability in cerberus helpdesk latest stable version, caused by insufficient authentication checks and leads to access ...

CVE-2005-1962

Cross-site scripting XSS vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the 1 errorcode parameter to index.php or 2 certain fields to clients.php...

CVE-2005-1963

Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to 1 reports.php, 2 knowledgebase.php, or 3 configuration.php, which leaks the information in a PHP error message...

CVE-2005-1963

CVE-2005-1963 affects Cerberus Helpdesk 0.97.3. It enables remote attackers to obtain sensitive information by crafting requests to reports.php, knowledgebase.php, or configuration.php, with the leakage exposed in a PHP error message. The available sources confirm an information disclosure vulner...