← Database

CVE-2005-4453

CRITICAL CVSS: 9.0 Published: 2005-12-21 Modified: 2026-06-16

Description

UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field.

Affected Platforms

Ultraapps Ultraapps Issue Manager

Weakness Type

NVD-CWE-Other

References