CVE-2005-1962 Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields t...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields to clients.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cerberus helpdesk | = 0.97.3 | No fix listed |
References
- echo.or.id exploit
- forum.cerberusweb.com exploit
- 15641 third-party-advisory
- 1014128 vdb-entry