CVE-2005-2005

CVE-2005-2005 describes an information disclosure vulnerability in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier, where the users.dat file, containing sensitive user information, is stored with insufficient access control under the web root. This allows unauthenticated remote attackers to directly access the file. The vulnerability has a CVSS score of 5.0, indicating a medium severity, as it requires no authentication or complex attack vectors to achieve partial confidentiality impact. While there is no known active exploitation, exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion, with 6 mentions.