medium4.3Public exploit code
CVE-2006-0509
Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cerberus Helpdesk 2.7 - 'Clients.php' Cross-Site Scripting2006-01-31 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the contact_search parameter and (2) unspecified url fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerberus | Cerberus Helpdesk | Versions 2.7, 2.7.1_development_release |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18657
- http://securityreason.com/securityalert/391
- http://www.osvdb.org/22843
- http://www.securityfocus.com/archive/1/423547/30/0/threaded
- http://www.securityfocus.com/bid/16439
- http://www.vupen.com/english/advisories/2006/0395
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24388
- http://secunia.com/advisories/18657
- http://securityreason.com/securityalert/391
- http://www.osvdb.org/22843
- http://www.securityfocus.com/archive/1/423547/30/0/threaded
- http://www.securityfocus.com/bid/16439
- http://www.vupen.com/english/advisories/2006/0395
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24388