CVE-2005-4428

CVE-2005-4428 documents a cross-site scripting (XSS) vulnerability in Cerberus Helpdesk (index.php) that can be exploited via the query parameter kb_ask . The underlying issue is failure to sanitize user input before reflecting it in dynamically-generated HTML, as described in connected Nessus en...