CVE-2005-4025

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user.

Published 2005-12-05. Last modified 2026-06-16.