VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 21, 2005· Updated Jun 16, 2026

CVE-2005-4453

CVE-2005-4453

Description

UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field.

Affected products

2
  • Ultraapps/Ultraapps Issue Manager2 versions
    cpe:2.3:a:ultraapps:ultraapps_issue_manager:2.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ultraapps:ultraapps_issue_manager:2.1:*:*:*:*:*:*:*
    • (no CPE)range: <2.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.