CVE-2005-2005

MEDIUM 5.0CVE-2005-2005 · Published 16/06/2005 · updated 16/06/2026

In short

CVE-2005-2005 is a MEDIUM (CVSS 5.0) vulnerability affecting ultimate php board (ultimate php board).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ultimate php board ultimate_php_board	`= 1.8= 1.8.2= 1.9= 1.9.6`	No fix yet

Description

Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information on registered users via a direct request to db/users.dat.

References

marc.info
secunia.com/advisories/15732 · Patch

More vulnerabilities in ultimate php board

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free