Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ultimate Php Board MEDIUM 6.8
CVE-2006-7169EPSS 5%

PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows remote attackers to execute …

Fix: after 2.0
Fix from $1,600 2007-03-20
Ultimate Php Board HIGH 7.5
CVE-2006-6790

Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remote attackers to inject arbitrar…

Fix: after 2.0_beta_1
Fix from $1,950 2006-12-28
Ultimate Php Board HIGH 10.0
CVE-2006-3203

The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remote attac…

Patch available
Fix from $1,950 2006-06-24
Ultimate Php Board MEDIUM 6.5
CVE-2006-3208

Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to execute arbitr…

No fix yet
Fix from $1,600 2006-06-24
Ultimate Php Board MEDIUM 5.0
CVE-2006-3204

Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote attackers…

No fix yet
Fix from $1,600 2006-06-24
Ultimate Php Board MEDIUM 5.0
CVE-2006-3205

Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power_env, and id_env parameters i…

Mitigation only
Fix from $1,600 2006-06-24
Ultimate Php Board MEDIUM 5.0
CVE-2006-3206

register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "[NR]" sequence in the signat…

Mitigation only
Fix from $1,600 2006-06-24
Ultimate Php Board MEDIUM 5.0
CVE-2006-3207

Directory traversal vulnerability in newpost.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to overwrite arbitrary files v…

Mitigation only
Fix from $1,600 2006-06-24
Ultimate Php Board MEDIUM 5.0
CVE-2005-2004

Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web scrip…

Patch available
Fix from $1,600 2005-06-17
Ultimate Php Board MEDIUM 5.0
CVE-2005-2003

Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id parameter to (1) viewtopic.php, …

Patch available
Fix from $1,600 2005-06-16
Ultimate Php Board MEDIUM 5.0
CVE-2005-2005

Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, which allows …

Patch available
Fix from $1,600 2005-06-16
Ultimate Php Board MEDIUM 5.0
CVE-2005-2030

Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords …

No fix yet
Fix from $1,600 2005-06-16
Ultimate Php Board HIGH 7.5
CVE-2005-1615

viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is n…

Mitigation only
Fix from $1,950 2005-05-16
Ultimate Php Board HIGH 7.5
CVE-2005-1616

viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or possibly…

Mitigation only
Fix from $1,950 2005-05-16
Ultimate Php Board MEDIUM 6.8
CVE-2005-1614

Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to inject arbitrary w…

No fix yet
Fix from $1,600 2005-05-16
Ultimate Php Board MEDIUM 5.0
CVE-2002-2276

Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the …

No fix yet
Fix from $1,600 2002-12-31
Ultimate Php Board MEDIUM 5.0
CVE-2002-2322

Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to ob…

Mitigation only
Fix from $1,600 2002-12-31