CVE-2006-0509: Cerberus Helpdesk

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the contact_search parameter and (2) unspecified url fields.

Affected products

• Cerberus Cerberus Helpdesk: version 2.7 only; version 2.7.1_development_release only

Published 2006-02-01. Last modified 2026-06-16.