What’s Vulnerable › Vulnerabilities
CVE-2005-4453
- Severity: critical (CVSS 9.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2005-12-21 · updated 2026-06-16
Description
UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field.
Affected products
References
- http://secunia.com/advisories/18174
- http://www.irmplc.com/advisory013.htm
- http://www.securityfocus.com/archive/1/419910/100/0/threaded
- http://www.securityfocus.com/bid/15976
- http://www.vupen.com/english/advisories/2005/3031
- http://secunia.com/advisories/18174
- http://www.irmplc.com/advisory013.htm
- http://www.securityfocus.com/archive/1/419910/100/0/threaded
- http://www.securityfocus.com/bid/15976
- http://www.vupen.com/english/advisories/2005/3031
Get alerted when CVE-2005-4453 or the next vulnerability affects your stack