CVE-2005-2843 Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to admin_main.php.
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to admin_main.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| helpdesk software hesk | = 0.92 | No fix listed |
References
- 20050829 Vulnerability in Helpdesk software Hesk 0.92 mailing-list
- 20050830 Re: Vulnerability in Helpdesk software Hesk 0.92 mailing-list
- 16623 patch third-party-advisory vendor-advisory
- 14692 vdb-entry
- helpdesk-adminmain-security-bypass(22054) vdb-entry