CVE-2005-4861

HIGH 7.5CVE-2005-4861 · Published 31/12/2005 · updated 16/06/2026

In short

CVE-2005-4861 is a HIGH (CVSS 7.5) vulnerability affecting ragnarok online control panel (jasio.net).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ragnarok online control panel jasio.net	`= 4.3.4a`	No fix yet

Description

functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing "/login.php" PHP_SELF value, which is not properly handled by the CHECK_AUTH function.

References

archives.neohapsis.com/archives/bugtraq/2005-07/0522.html
secunia.com/advisories/16287 · Vendor Advisory
jasio.net/index.php
osvdb.org/18389

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free