Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cerberus Helpdesk SQL注入漏洞
Vulnerability Description
Cerberus Helpdesk存在多个SQL注入漏洞，远程攻击者可以通过到attachment_send.php的(1) file_id参数， (2)email_parser.php内的$addy变量，(3)email_parser.php内的$address变量，(4)structs.php内的$a_address变量，到cer_KnowledgebaseHandler.class.php的(5) kbid参数，到addresses_export.php的(6)queues[]参数，到display
CVSS Information
N/A
Vulnerability Type
N/A