CVE-2005-4453 UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to....
HighCVSS 9.0
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ultraapps issue manager | = 2.1 | No fix listed |
References
- 18174 third-party-advisory
- www.irmplc.com
- 20051220 IRM 013: Ultraapps Issue Manager is vulnerable to Privilege Escalation mailing-list
- 15976 patch vdb-entry
- ADV-2005-3031 vdb-entry