CVE-2005-4428: XSS
Published Dec 20, 2005
·Updated
Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kbask parameter.
Affected Software
1 affected component
Cerberus Cerberus Helpdesk=2.649
Event History
Dec 20, 2005
CVE Published
11:03 PM
Dec 21, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4428?
CVE-2005-4428 is considered a high severity cross-site scripting vulnerability.
2
How do I fix CVE-2005-4428?
To fix CVE-2005-4428, you should update Cerberus Helpdesk to a version that has patched this vulnerability.
3
What software is affected by CVE-2005-4428?
CVE-2005-4428 specifically affects Cerberus Helpdesk version 2.649.
4
What type of attack does CVE-2005-4428 enable?
CVE-2005-4428 allows remote attackers to perform cross-site scripting (XSS) attacks.
5
Can CVE-2005-4428 be exploited without authentication?
Yes, CVE-2005-4428 can be exploited by unauthenticated attackers through the kb_ask parameter.