CVE-2002-1659

user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.