CH
Product
Cerberus Helpdesk
by Cerberus · last CVE Mar 6, 2009
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Cerberus Helpdesk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2008-6440
–
1%
Mar 6
Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers
Affected: 2.5
CVE-2006-5428
–
3%
Oct 20
rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain…
Affected: 3.2.1
CVE-2006-4539
–
2%
Sep 5
(1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier,…
Affected: 3.2
CVE-2006-0509
–
2%
Feb 1
Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the…
Affected: 2.7; 2.7.1_development_release
CVE-2005-4428
–
1%
Dec 20
Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parameter
Affected: 2.649
CVE-2005-4427
–
3%
Dec 20
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the…
Affected: 2.649
CVE-2005-3502
–
2%
Nov 5
attachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified file_id parameter
Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +1 more
CVE-2005-1962
–
1%
Jun 16
Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or…
Affected: 0.97.3
CVE-2005-1963
–
2%
Jun 16
Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which…
Affected: 0.97.3
Showing 9