CVE-2006-6366

MEDIO 6.8CVE-2006-6366 · Published 07/12/2006 · updated 16/06/2026

En resumen

CVE-2006-6366 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a helpdesk (cerberus).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.8%, mayor que el 78.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
helpdesk cerberus	`= 0.97.3= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6.1= 2.7= 2.7.1= 3.2.1= 3.2.317= 3.3`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 through 2.7, 3.2.1, and 3.3 allows remote attackers to inject arbitrary web script or HTML via the js parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

References

secunia.com/advisories/23193 · Patch
securityfocus.com/bid/21423 · Vendor Advisory
vupen.com/english/advisories/2006/4875
exchange.xforce.ibmcloud.com/vulnerabilities/30719

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free