CVE-2006-0509 Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the contact_search paramete...
MediumCVSS 4.3
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the contact_search parameter and (2) unspecified url fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cerberus helpdesk | = 2.7 | No fix listed |
| cerberus helpdesk | = 2.7.1_development_release | No fix listed |
References
- 18657 third-party-advisory
- 391 third-party-advisory
- 22843 vdb-entry
- 20060130 Cerberus Helpdesk vulnerable to XSS exploit mailing-list
- 16439 exploit vdb-entry
- ADV-2006-0395 vdb-entry
- cerberus-clients-xss(24388) vdb-entry