one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.Referenceshttp://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.htmlhttp://marc.info/?l=bugtraq&m=105302025601231&w=2
