Skip to content
Noroxi

ultimate php board records

18 published records for vendor ultimate php board.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    18 records
    • CVE-2006-3203
      41Plan

      The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows rem

      CriticalCVSS 10.0No exploitEPSS 2%

      ultimate php board · ultimate php boardJun 23, 2006

    • CVE-2006-6790
      31Monitor

      Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remote attackers to inject

      HighCVSS 7.5Proof of conceptEPSS 2%

      ultimate php board · ultimate php boardDec 27, 2006

    • CVE-2005-1615
      31Monitor

      viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, w

      HighCVSS 7.5Proof of conceptEPSS 2%

      ultimate php board · ultimate php boardMay 16, 2005

    • CVE-2005-1616
      30Monitor

      viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or

      HighCVSS 7.5No exploitEPSS 1%

      ultimate php board · ultimate php boardMay 16, 2005

    • CVE-2006-7169
      29Monitor

      PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows remote attackers to

      MediumCVSS 6.8Proof of conceptEPSS 5%

      ultimate php board · ultimate php boardMar 20, 2007

    • CVE-2005-1614
      28Monitor

      Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to inject ar

      MediumCVSS 6.8Proof of conceptEPSS 3%

      ultimate php board · ultimate php boardMay 16, 2005

    • CVE-2006-3208
      26Monitor

      Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to execu

      MediumCVSS 6.5No exploitEPSS 1%

      ultimate php board · ultimate php boardJun 23, 2006

    • CVE-2005-2030
      21Monitor

      Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the p

      MediumCVSS 5.0Proof of conceptEPSS 3%

      ultimate php board · ultimate php boardJun 16, 2005

    • CVE-2006-3204
      21Monitor

      Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote

      MediumCVSS 5.0No exploitEPSS 1%

      ultimate php board · ultimate php boardJun 23, 2006

    • CVE-2002-2276
      20Monitor

      Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which l

      MediumCVSS 5.0No exploitEPSS 1%

      ultimate php board · ultimate php boardDec 31, 2002

    • CVE-2002-2322
      20Monitor

      Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attack

      MediumCVSS 5.0No exploitEPSS 1%

      ultimate php board · ultimate php boardDec 31, 2002

    • CVE-2006-3205
      20Monitor

      Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power_env, and id_env par

      MediumCVSS 5.0No exploitEPSS 1%

      ultimate php board · ultimate php boardJun 23, 2006

    • CVE-2006-3207
      20Monitor

      Directory traversal vulnerability in newpost.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to overwrite arbitrar

      MediumCVSS 5.0No exploitEPSS 1%

      ultimate php board · ultimate php boardJun 23, 2006

    • CVE-2005-2005
      20Monitor

      Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, whic

      MediumCVSS 5.0No exploitEPSS 1%

      ultimate php board · ultimate php boardJun 16, 2005

    • CVE-2005-2003
      20Monitor

      Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id parameter to (1) viewto

      MediumCVSS 5.0No exploitEPSS 1%

      ultimate php board · ultimate php boardJun 16, 2005

    • CVE-2005-2004
      20Monitor

      Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary

      MediumCVSS 5.0No exploitEPSS 1%

      ultimate php board · ultimate php boardJun 17, 2005

    • CVE-2006-3206
      20Monitor

      register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "[NR]" sequence in t

      MediumCVSS 5.0No exploitEPSS 1%

      ultimate php board · ultimate php boardJun 23, 2006

    • CVE-2002-1821
      18Monitor

      Ultimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct reque

      MediumCVSS 4.6No exploitEPSS 0%

      ultimate php board · ultimate php boardDec 31, 2002