CVE-2005-4453: Ultraapps Issue Manager

High severity, CVSS 9.0. EPSS: 2.9% chance of exploitation in the next 30 days.

UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field.

Affected products

• Ultraapps Ultraapps Issue Manager: version 2.1 only

Published 2005-12-21. Last modified 2026-06-16.