Files
cve/cves/2006/CVE-2006-5428.md

731 B

CVE-2006-5428

Description

rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information (ticket data) via a direct request.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB