CVE-2005-3005: Helpdesk Software Hesk

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) admin_main.php by modifying the PHPSESSID session ID parameter or cookie.

Affected products

• Helpdesk Software Hesk: version 0.92 only; version 0.93 only

Published 2005-09-21. Last modified 2026-06-16.