~/products/helpdesk_software/hesk

pipeline liveDigest Docs

Helpdesk Software Hesk vulnerabilities

2 known vulnerabilities affecting helpdesk_software/hesk.

Total CVEs

2

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH2

Vulnerabilities

SortPage 1 of 1

CVE-2005-3005P3HIGHCVSS 7.5PoCv0.92v0.932005-09-21

CVE-2005-3005 [HIGH] CVE-2005-3005: Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) ad Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) admin_main.php by modifying the PHPSESSID session ID parameter or cookie.

CVE-2005-2843P3HIGHCVSS 7.5v0.922005-09-08

CVE-2005-2843 [HIGH] CVE-2005-2843: Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote at Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to admin_main.php.