Description
attachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified file_id parameter.
References
- 17431 third-party-advisory
- 1015153 vdb-entry
- 15315 vdb-entry
- 20461 vdb-entry
- 20051104 Cerberus helpdesk mailing-list