Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php (2) knowledgebase.php or (3) configuration.php which leaks the information in a PHP error message.