UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2005-12-21T11:00:00
Updated: 2024-08-07T23:46:05.527Z
Reserved: 2005-12-21T00:00:00
Link: CVE-2005-4453

No data.

Status : Modified
Published: 2005-12-21T11:03:00.000
Modified: 2024-11-21T00:04:17.790
Link: CVE-2005-4453

No data.