CVE-2006-0509

Cerberus Helpdesk - Cross-Site Scripting via Contact Search Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0509. PoCs published by [email protected].

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Cerberus Helpdesk due to improper input sanitization. The example URL demonstrates how an attacker could inject arbitrary script code into the 'contact_search' parameter.

Description

Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the contact_search parameter and (2) unspecified url fields.

Exploits (1)

exploitdb WRITEUP VERIFIED

by [email protected] · textwebappsphp

https://www.exploit-db.com/exploits/27153

View Code ZIP pw:eip

The provided text describes a cross-site scripting (XSS) vulnerability in Cerberus Helpdesk due to improper input sanitization. The example URL demonstrates how an attacker could inject arbitrary script code into the 'contact_search' parameter.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Cerberus Helpdesk

No auth needed

Prerequisites: Access to the vulnerable application URL

MITRE ATT&CK