2.649

DATE	CVE	VULNERABILITY TITLE	RISK
2005-12-20	CVE-2005-4428	Input Validation vulnerability in Cerberus Helpdesk 2.649 Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parameter. network cerberus	4.3
2005-12-20	CVE-2005-4427	Input Validation vulnerability in Cerberus Helpdesk 2.649 Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php. network low complexity cerberus	7.5