CVE-2005-2843: Helpdesk Software Hesk

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to admin_main.php.

Affected products

• Helpdesk Software Hesk: version 0.92 only

Published 2005-09-08. Last modified 2026-06-16.