CVE-2005-4427
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute...
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php.
Exploit likelihood
What each source reports
NVD Score used
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php.
- Record
CVE-2005-4427- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php.
- Record
CVE-2005-4427- Updated
- 2026-11-02
EUVDEUVD-2005-4422 No score
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php.
- Record
EUVD-2005-4422- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p4c6-ww6x-99rw No score
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute...
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php.
- Record
GHSA-p4c6-ww6x-99rw- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Cerberus Helpdesk 2.649 - 'cer_KnowledgebaseHandler.class.php?_load_article_details' SQL Injection | 2005-12-27 |
| Exploit-DB | Cerberus Helpdesk 2.649 - 'addresses_export.php?queues' SQL Injection | 2005-12-27 |
| Exploit-DB | Cerberus Helpdesk 2.649 - 'display_ticket_thread.php?ticket' SQL Injection | 2005-12-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-4427 is a high vulnerability (CVSS 7.5) in Cerberus Helpdesk, published December 20, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.22%, the 88th percentile. No source names a fixed version.
References
osvdb.org/21991
marc.info?l=full-disclosure&m=113500878630130&w=2
securityfocus.com/bid/16062
Show 9 moreShow less
secunia.com/advisories/18112
exchange.xforce.ibmcloud.com/vulnerabilities/23836
forum.cerberusweb.com/showthread.php?s=&postid=30315
nvd.nist.gov/vuln/detail/CVE-2005-4427
github.com/advisories/GHSA-p4c6-ww6x-99rw