PT-2005-2912 · Cerberus · Cerberus Helpdesk

Dedi Dwianto · Publicado 2005-06-14 · Atualizado 2008-09-05 · CVE-2005-1962

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cerberus Helpdesk version 0.97.3

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the errorcode parameter to "index.php" or certain fields to "clients.php".

Recommendations For Cerberus Helpdesk version 0.97.3, avoid using the errorcode parameter in the "index.php" endpoint and restrict input in certain fields to "clients.php" until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-1962

Produtos afetados

Cerberus Helpdesk

Referências · 6

• 🔥 http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost · Exploit
• 🔥 http://echo.or.id/adv/adv15-theday-2005.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1962 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1962 · Nota
• http://secunia.com/advisories/15641 · Nota
• http://securitytracker.com/id?1014128 · Nota