high7.5Public exploit code
CVE-2005-1615
viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ultimate PHP Board 1.8/1.9 - 'viewforum.php' SQL Injection2005-05-13 · webapps · php · Verified
Impact
viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ultimate Php Board | Ultimate Php Board | Versions 1.8, 1.8.2, 1.9, 1.9.6 |