CVE-2005-4427 - CVE House
Back to Database
Status published High CVE-2005-4427

Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers...

Vulnerability Description

Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-4427

Credits & Attribution

No credits recorded in the NVD database.

References

More from cerberus

View All →
CVE-2017-6880
Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers...
Critical 9.8
CVE-2008-6440
Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to...
Medium 5
CVE-2007-5930
Cross-site scripting (XSS) vulnerability in the web interface in Cerberus...
Medium 4.3
CVE-2006-6366
Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3,...
Medium 6.8
CVE-2006-5428
rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's...
Medium 5

Affected Vendor

Affected Software

cerberus helpdesk
Vulnerable Versions:
2.649

Timeline

Official Publish: December 20th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.