Cross-Site Scripting Vulnerability in Cerberus Helpdesk by Cerberus
CVE-2005-4428

Currently unrated

Key Information:

Vendor

Cerberus

Status
Cerberus Helpdesk
Vendor
CVE Published:
20 December 2005

What is CVE-2005-4428?

A cross-site scripting vulnerability exists within the index.php file of Cerberus Helpdesk, allowing remote attackers to exploit the kb_ask parameter. This flaw enables the injection of arbitrary web scripts or HTML content into the affected application, posing a significant risk to user security and data integrity.

References

http://marc.info/?l=full-disclosure&m=113500878630130&w=2
mailing-listx_refsource_FULLDISC
http://www.securityfocus.com/bid/16062
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/23834
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.