CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-4458

Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables when performing checks for special privileges, which allows users to gain administrator privileges by adding themselves to the SITE_MGR group.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.017

EPSS Ranking 81.6%

CVSS Severity

CVSS v2 Score 9.0

References

Products affected by CVE-2005-4458

Metadot » Metadot Portal Server » Version: 5.5.2.1

cpe:2.3:a:metadot:metadot_portal_server:5.5.2.1
Metadot » Metadot Portal Server » Version: 5.6.4

cpe:2.3:a:metadot:metadot_portal_server:5.6.4
Metadot » Metadot Portal Server » Version: 5.6.4.1

cpe:2.3:a:metadot:metadot_portal_server:5.6.4.1
Metadot » Metadot Portal Server » Version: 5.6.4.2

cpe:2.3:a:metadot:metadot_portal_server:5.6.4.2
Metadot » Metadot Portal Server » Version: 5.6.4.3

cpe:2.3:a:metadot:metadot_portal_server:5.6.4.3
Metadot » Metadot Portal Server » Version: 5.6.5

cpe:2.3:a:metadot:metadot_portal_server:5.6.5
Metadot » Metadot Portal Server » Version: 5.6.5.1

cpe:2.3:a:metadot:metadot_portal_server:5.6.5.1
Metadot » Metadot Portal Server » Version: 5.6.5.2

cpe:2.3:a:metadot:metadot_portal_server:5.6.5.2
Metadot » Metadot Portal Server » Version: 5.6.5.3

cpe:2.3:a:metadot:metadot_portal_server:5.6.5.3
Metadot » Metadot Portal Server » Version: 5.6.5.3.1

cpe:2.3:a:metadot:metadot_portal_server:5.6.5.3.1
Metadot » Metadot Portal Server » Version: 5.6.5.4b5

cpe:2.3:a:metadot:metadot_portal_server:5.6.5.4b5
Metadot » Metadot Portal Server » Version: 5.6.6

cpe:2.3:a:metadot:metadot_portal_server:5.6.6
Metadot » Metadot Portal Server » Version: 6.4

cpe:2.3:a:metadot:metadot_portal_server:6.4
Metadot » Metadot Portal Server » Version: 6.4.1

cpe:2.3:a:metadot:metadot_portal_server:6.4.1
Metadot » Metadot Portal Server » Version: 6.4.2

cpe:2.3:a:metadot:metadot_portal_server:6.4.2
Metadot » Metadot Portal Server » Version: 6.4.3

cpe:2.3:a:metadot:metadot_portal_server:6.4.3
Metadot » Metadot Portal Server » Version: 6.4.4

cpe:2.3:a:metadot:metadot_portal_server:6.4.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-4458

Products

Pricing

Contact Us