Description
user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.
References
- portalapp-user-privilege-elevation(10558) vdb-entry
- 1005541 vdb-entry
- 10465 third-party-advisory
Published May 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre
user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.