attachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified file_id parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Cerberus_helpdesk | Cerberus | 2.0 | 2.0 |
Cerberus_helpdesk | Cerberus | 2.1 | 2.1 |
Cerberus_helpdesk | Cerberus | 2.2 | 2.2 |
Cerberus_helpdesk | Cerberus | 2.3 | 2.3 |
Cerberus_helpdesk | Cerberus | 2.4 | 2.4 |
Cerberus_helpdesk | Cerberus | 2.5 | 2.5 |
Cerberus_helpdesk | Cerberus | 2.6.1 | 2.6.1 |