Ultimate Php Board

Vendor:

First CVE: Dec 31, 2002 · Active for 23 years

19

Total CVEs

Bottom 1%

4.8

Avg CVEs / Year

Bottom 1%

6.2

Avg CVSS

Higher Avg CVSS than 87% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Ultimate Php Board over time

Volume of CVEsAvg CVSS Base Score

First CVE

Dec 31, 2002

23 years ago

Most Recent CVE

Mar 20, 2007

7,067 days ago

CVE Severity & Scoring

Ultimate Php Board19 CVEs

74%

21%

All CVEs352,294 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local0 (0.0%)

Network1 (5.3%)

Unknown18 (94.7%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (5.3%)

High0 (0.0%)

Unknown18 (94.7%)

User Interaction

None1 (5.3%)

Unknown18 (94.7%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None1 (5.3%)

Unknown18 (94.7%)

Top CVEs

Signals from CVEs in this product scope (19 CVEs).

19 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2006-7169MEDIUM PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in	Mar 20, 2007	6.8	28	NO	YES
CVE-2006-6790HIGH Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username par	Dec 28, 2006	7.5	28	NO	YES
CVE-2005-1615HIGH viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.i	May 16, 2005	7.5	28	NO	YES
CVE-2005-1614MEDIUM Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the posto	May 16, 2005	6.8	27	NO	YES
CVE-2006-3203HIGH The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges.	Jun 24, 2006	10.0	25	NO	NO
CVE-2005-2030MEDIUM Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly a	Jun 16, 2005	5.0	24	NO	YES
CVE-2002-1820CRITICAL register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by regi	Dec 31, 2002	9.8	24	NO	NO
CVE-2005-2004MEDIUM Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ref param	Jun 17, 2005	5.0	21	NO	NO
CVE-2005-2003MEDIUM Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id parameter to (1) viewtopic.php, (2) profile.php, or (3) newpost	Jun 16, 2005	5.0	20	NO	NO
CVE-2005-2005MEDIUM Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, which allows remote attackers to obtain sens	Jun 16, 2005	5.0	20	NO	NO

View all 19 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (19 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

5 CVEs

26.3% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (19 CVEs).

Media Mentions

Signals from CVEs in this product scope (19 CVEs).

Top CNAs Publishing CVEs For Ultimate Php Board

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
1.9.6_gold	1	5.0	1.2%	0
1.9.6	12	6.1	1.8%	3
1.9	12	6.1	1.8%	3
1.8.2	12	6.1	1.8%	3
1.8	12	6.1	1.8%	3
1.0_beta	2	4.8	1.0%	0
1.0	3	6.5	1.5%	0