CVSS: 5.0EPSS: 0%CPEs: 7EXPL: 1CVE-2005-3502
https://notcve.org/view.php?id=CVE-2005-3502
attachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified file_id parameter. • http://marc.info/?l=full-disclosure&m=113109433413298&w=2 http://secunia.com/advisories/17431 http://securitytracker.com/id?1015153 http://www.osvdb.org/20461 http://www.securityfocus.com/bid/15315 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 2CVE-2005-1962
https://notcve.org/view.php?id=CVE-2005-1962
Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields to clients.php. • http://echo.or.id/adv/adv15-theday-2005.txt http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost http://secunia.com/advisories/15641 http://securitytracker.com/id?1014128 •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 2CVE-2005-1963
https://notcve.org/view.php?id=CVE-2005-1963
Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which leaks the information in a PHP error message. • http://echo.or.id/adv/adv15-theday-2005.txt http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost http://secunia.com/advisories/15641 http://securitytracker.com/id?1014128 http://www.wgmdev.com/jira/browse/CERB-170 •
CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0CVE-2003-1476
https://notcve.org/view.php?id=CVE-2003-1476
Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access. • http://www.cerberusftp.com/cerberus-releasenotes.htm#KnownIssues http://www.securityfocus.com/bid/7556 •