Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Hesk Admin.PHP Authentication Bypass Vulnerability

Hesk is prone to an authentication bypass vulnerability.

The application does not properly validate username and password pairs, and subsequently allows administrative access without a password.

This can lead to unauthorized access of sensitive data, modification of helpdesk data and program code, and other types of attacks.







 

Privacy Statement
Copyright 2009, SecurityFocus