What’s Vulnerable › Vulnerabilities
CVE-2005-4025
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2005-12-05 · updated 2026-06-16
Description
Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user.
References
Get alerted when CVE-2005-4025 or the next vulnerability affects your stack