CVE-2006-4539

1 includes/widgets/modulecompanytickets.php and 2 includes/widgets/moduletracktickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier, allows remote attackers to bypass security restrictions and obtain sensitive information via the ticket parameter. NOTE: the...

[SA21706] Cerberus Helpdesk "ticket" Parameter Arbitrary Ticket Access

TITLE: Cerberus Helpdesk "ticket" Parameter Arbitrary Ticket Access SECUNIA ADVISORY ID: SA21706 VERIFY ADVISORY: http://secunia.com/advisories/21706/ CRITICAL: Moderately critical IMPACT: Security Bypass, Exposure of sensitive information WHERE: From remote SOFTWARE: Cerberus Helpdesk 2.x...

OneOrZero Helpdesk V1.6.4.1 susceptible to SQL injection and XSS

vendor: http://www.oneorzero.com/ vuln : http://host/supporter/index.php?t=tupd&id=SQL http://host/supporter/index.php?t=tupd&id=XSS Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran HackerZ Security Team...

HelpDesk.cgi Vulnerability

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : HelpDesk.cgi Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct:...

CVE-2006-2990

Cross-site scripting XSS vulnerability in default.asp in VanillaSoft Helpdesk 2005 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2006-2990

The CVE-2006-2990 entry describes a Cross-site scripting (XSS) vulnerability in VanillaSoft Helpdesk 2005 and earlier, exploitable via the username parameter in default.asp. Affected software: VanillaSoft Helpdesk (2005 and earlier). Root cause: improper handling of user-supplied username enablin...

CVE-2006-2990

Cross-site scripting XSS vulnerability in default.asp in VanillaSoft Helpdesk 2005 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

[SA19446] OneOrZero "id" SQL Injection Vulnerability

TITLE: OneOrZero "id" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19446 VERIFY ADVISORY: http://secunia.com/advisories/19446/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: OneOrZero Helpdesk 1.x http://secunia.com/product/1568/ DESCRIPTION: Preddy...

OneOrZero Helpdesk < 1.6.5.3 index.php id Parameter SQL Injection

Binary data 3492.prm...

OneOrZero 1.6.3 Helpdesk - index.php SQL Injection

OneOrZero 1.6.3 Helpdesk - index.php SQL Injection source: https://www.securityfocus.com/bid/17298/info OneOrZero Helpdesk is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...

OneOrZero 1.6.3 Helpdesk - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/17298/info OneOrZero Helpdesk is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...

cerberusXSS.txt

Inputs in the Cerberus Helpdesk is not properly sanitized, and XSS is possible in a lot of the systems input fields and url parameters. You can add XSS that will hit every user of the system, and even simple scripting tags like alert‘f’ is allowed PoC:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via 1 the contactsearch parameter and 2 unspecified url fields...

CVE-2006-0509

Multiple cross-site scripting XSS vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via 1 the contactsearch parameter and 2 unspecified url fields...

CVE-2006-0509

Multiple cross-site scripting XSS vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via 1 the contactsearch parameter and 2 unspecified url fields...

CVE-2006-0509

CVE-2006-0509 describes multiple cross-site scripting (XSS) vulnerabilities in Cerberus Helpdesk, affecting the files around clients.php (likely in version ~2.7). The vulnerabilities allow remote attackers to inject arbitrary web script or HTML through the parameters contact_search and unspecifie...

Cerberus Helpdesk 2.7 - Clients.php Cross-Site Scripting

Cerberus Helpdesk 2.7 - Clients.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16439/info Cerberus Helpdesk is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage th...

Cerberus Helpdesk vulnerable to XSS

Inputs in the Cerberus Helpdesk is not properly sanitized, and XSS is possible in a lot of the systems input fields and url parameters. You can add XSS that will hit every user of the system, and even simple scripting tags like scriptalert‘f’/script is allowed PoC:...

Cerberus Helpdesk 2.7 - 'Clients.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16439/info Cerberus Helpdesk is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Cerberus Helpdesk GUI Agent < 2.7.1 Multiple Remote Vulnerabilities (SQLi, XSS)

The remote host is running Cerberus Helpdesk, a web-based helpdesk suite written in PHP. The installed version of Cerberus Helpdesk is affected by several SQL injection issues and one cross-site scripting flaw because of its failure to sanitize user-supplied input to various parameters and script...