Unscored severity · published Jun 16, 2005
CVE-2005-1963
Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which leaks the information in a PHP error message.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Cerberus Helpdesk · Cerberus
0.97.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1963
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1963
Exploit
http://echo.or.id/adv/adv15-theday-2005.txt
Exploit
http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost
secunia.com
http://secunia.com/advisories/15641
securitytracker.com
http://securitytracker.com/id?1014128
www.wgmdev.com
http://www.wgmdev.com/jira/browse/CERB-170
More from Cerberus Helpdesk
–
CVE-2008-6440
Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers
–
CVE-2006-5428
rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain…
–
CVE-2006-4539
(1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier,…
–
CVE-2006-0509
Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the…
–
CVE-2005-4428
Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parameter