Description
Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to admin_main.php.
References
- 20050829 Vulnerability in Helpdesk software Hesk 0.92 mailing-list
- 16623 third-party-advisory
- 20050830 Re: Vulnerability in Helpdesk software Hesk 0.92 mailing-list
- 14692 vdb-entry
- helpdesk-adminmain-security-bypass(22054) vdb-entry