Lucene search

K
cvelistMitreCVELIST:CVE-2005-4861
HistoryOct 03, 2022 - 4:22 p.m.

CVE-2005-4861

2022-10-0316:22:45
mitre
www.cve.org
ragnarok online control panel
remote attack
authentication bypass
php_self
check_auth function

6.9 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing “/login.php” PHP_SELF value, which is not properly handled by the CHECK_AUTH function.

6.9 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

Related for CVELIST:CVE-2005-4861