Help Desk ‘install.php’ Script Grants Remote Users Administrative Access
If you’re using help desk software from helpdeskreloaded.com, watch out for the install.php file. It can be used to load accountsetup.php to create a username/password to access the target help desk application.
SecurityTracker.com - Help Desk ‘install.php’ Script Grants Remote Users Administrative Access