Vulnerability in Help Desk Reloaded Free
CVE-2005-4025
Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user.
EPSS: 0.014 (70.6th percentile) — read the EPSS interpretation.
Affected products
- Help_desk_reloaded Free_help_desk
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)