İçeriğe atla
Noroxi

ultimate php board kayıtları

ultimate php board üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    18 kayıt
    • CVE-2006-3203
      41Planlayın

      The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows rem

      KritikCVSS 10,0İstismar yokEPSS %3

      ultimate php board · ultimate php board23 Haz 2006

    • CVE-2006-6790
      31İzleyin

      Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remote attackers to inject

      YüksekCVSS 7,5Kavram kanıtıEPSS %2

      ultimate php board · ultimate php board27 Ara 2006

    • CVE-2005-1615
      31İzleyin

      viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, w

      YüksekCVSS 7,5Kavram kanıtıEPSS %2

      ultimate php board · ultimate php board16 May 2005

    • CVE-2005-1616
      30İzleyin

      viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or

      YüksekCVSS 7,5İstismar yokEPSS %1

      ultimate php board · ultimate php board16 May 2005

    • CVE-2006-7169
      29İzleyin

      PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows remote attackers to

      OrtaCVSS 6,8Kavram kanıtıEPSS %5

      ultimate php board · ultimate php board20 Mar 2007

    • CVE-2005-1614
      28İzleyin

      Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to inject ar

      OrtaCVSS 6,8Kavram kanıtıEPSS %4

      ultimate php board · ultimate php board16 May 2005

    • CVE-2006-3208
      26İzleyin

      Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to execu

      OrtaCVSS 6,5İstismar yokEPSS %1

      ultimate php board · ultimate php board23 Haz 2006

    • CVE-2005-2030
      21İzleyin

      Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the p

      OrtaCVSS 5,0Kavram kanıtıEPSS %3

      ultimate php board · ultimate php board16 Haz 2005

    • CVE-2006-3204
      21İzleyin

      Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote

      OrtaCVSS 5,0İstismar yokEPSS %2

      ultimate php board · ultimate php board23 Haz 2006

    • CVE-2002-2276
      20İzleyin

      Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which l

      OrtaCVSS 5,0İstismar yokEPSS %2

      ultimate php board · ultimate php board31 Ara 2002

    • CVE-2002-2322
      20İzleyin

      Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attack

      OrtaCVSS 5,0İstismar yokEPSS %1

      ultimate php board · ultimate php board31 Ara 2002

    • CVE-2006-3205
      20İzleyin

      Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power_env, and id_env par

      OrtaCVSS 5,0İstismar yokEPSS %1

      ultimate php board · ultimate php board23 Haz 2006

    • CVE-2006-3207
      20İzleyin

      Directory traversal vulnerability in newpost.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to overwrite arbitrar

      OrtaCVSS 5,0İstismar yokEPSS %1

      ultimate php board · ultimate php board23 Haz 2006

    • CVE-2005-2005
      20İzleyin

      Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, whic

      OrtaCVSS 5,0İstismar yokEPSS %1

      ultimate php board · ultimate php board16 Haz 2005

    • CVE-2005-2003
      20İzleyin

      Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id parameter to (1) viewto

      OrtaCVSS 5,0İstismar yokEPSS %1

      ultimate php board · ultimate php board16 Haz 2005

    • CVE-2005-2004
      20İzleyin

      Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary

      OrtaCVSS 5,0İstismar yokEPSS %1

      ultimate php board · ultimate php board17 Haz 2005

    • CVE-2006-3206
      20İzleyin

      register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "[NR]" sequence in t

      OrtaCVSS 5,0İstismar yokEPSS %1

      ultimate php board · ultimate php board23 Haz 2006

    • CVE-2002-1821
      18İzleyin

      Ultimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct reque

      OrtaCVSS 4,6İstismar yokEPSS %1

      ultimate php board · ultimate php board31 Ara 2002