CVE-2026-6265 | High | 8.8 | 2026-04-27 | Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus F… |
CVE-2017-6880 | Critical | 9.8 | 2017-03-17 | Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact v… |
CVE-2008-6440 | | | 2009-03-06 | Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard… |
CVE-2007-5930 | | | 2007-11-10 | Cross-site scripting (XSS) vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML… |
CVE-2006-6366 | | | 2006-12-07 | Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 through 2.7, 3.2.1, and 3.3 allows remot… |
CVE-2006-5428 | | | 2006-10-20 | rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GU… |
CVE-2006-4539 | | | 2006-09-05 | (1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and… |
CVE-2006-0509 | | | 2006-02-01 | Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or… |
CVE-2005-4428 | | | 2005-12-20 | Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parame… |
CVE-2005-4427 | | | 2005-12-20 | Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachmen… |
CVE-2005-3502 | | | 2005-11-05 | attachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified file_id parameter. |
CVE-2005-1963 | | | 2005-06-16 | Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configu… |
CVE-2005-1962 | | | 2005-06-16 | Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode param… |
CVE-2003-1476 | | | 2003-12-31 | Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access. |