CVE-2005-4861

functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing "/login.php" PHP_SELF value, which is not properly handled by the CHECK_AUTH function.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.47% chance of exploitation in the next 30 days, 72th percentile

Published

2007-09-05

Updated

2024-09-17

Proof-of-concept exploits (1)

• http://archives.neohapsis.com/archives/bugtraq/2005-07/0522.html

References

• CVE Record
• NVD entry

Related

• CVE-2005-4832
• CVE-2005-4868
• CVE-2005-4821
• CVE-2005-4869
• CVE-2005-4809
• CVE-2005-4879