CVE-2005-1962
CVE-2005-1962 is a medium-severity vulnerability in Cerberus Cerberus Helpdesk with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 4.3)
- EPSS exploit prediction: 1% (66th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cerberus Cerberus Helpdesk
- Published:
- Last modified:
Description
Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields to clients.php.
Frequently asked questions
- What is CVE-2005-1962?
- Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields to clients.php.
- How severe is CVE-2005-1962?
- CVE-2005-1962 has a CVSS 2.0 base score of 4.3, rated medium severity.
- Is CVE-2005-1962 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (66th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-1962?
- CVE-2005-1962 affects Cerberus Cerberus Helpdesk. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2005-1962?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2005-1962 published?
- CVE-2005-1962 was published on 2005-06-16 and last updated on 2026-06-16.
References
- http://echo.or.id/adv/adv15-theday-2005.txt
- http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost
- http://secunia.com/advisories/15641
- http://securitytracker.com/id?1014128
Affected products (1)
- cpe:2.3:a:cerberus:cerberus_helpdesk:0.97.3:*:*:*:*:*:*:*
More vulnerabilities in Cerberus Cerberus Helpdesk
- CVE-2006-4539 — High (CVSS 7.5): (1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center…
- CVE-2005-4427 — High (CVSS 7.5): Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands…
- CVE-2008-6440 — Medium (CVSS 5.0): Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests…
- CVE-2006-5428 — Medium (CVSS 5.0): rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which…
- CVE-2005-3502 — Medium (CVSS 5.0): attachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a…
- CVE-2005-1963 — Medium (CVSS 5.0): Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1)…