Approved changes feed: RSS · Atom

cpe:2.3:a:cerberus:cerberus_helpdesk:2.649:*:*:*:*:*:*:*

part: a version: 2.649 update: *

VendorCerberus (3bdd9bcc-3028-5a92-aea2-2bdf04834498)
ProductCerberus Helpdesk (d3ee6a6f-bf0c-54f7-a2a2-ad64022cd3fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4428 vulnerable 2026-06-08 04:48:43.798126 Details available
Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parameter.
Published: 2005-12-20T23:00:00.000Z
Updated: 2024-08-07T23:46:05.153Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4427 vulnerable 2026-06-08 04:48:43.797741 Details available
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php.
Published: 2005-12-20T23:00:00.000Z
Updated: 2024-08-07T23:46:04.514Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.