high7.5Public exploit code
CVE-2003-0395
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ultimate PHP Board 1.9 - 'admin_iplog.php' Arbitrary PHP Execution2003-05-24 · webapps · php · Verified
Impact
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myupb | Ultimate Php Board | Version 1.9 |