← Back

Metadot

metadot

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Metadot Portal Server
metadot_portal_server
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-4458
1Metadot
1Metadot Portal Server
Apr 16, 2026
Dec 21, 2005
N/A· v4
N/A· v3
9.0 HIGH· v2
Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables when performing checks for special privileges, which allows users to gain administrat...Show more
Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables when performing checks for special privileges, which allows users to gain administrator privileges by adding themselves to the SITE_MGR group.Show less