Unknown · Ultimate Php Board · CVE-2005-1614
**Name of the Vulnerable Software and Affected Versions**
Ultimate PHP Board (UPB) versions 1.8 through 1.9.6
**Description**
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `postorder` parameter in the viewforum.php file.
**Recommendations**
For Ultimate PHP Board (UPB) versions 1.8 through 1.9.6, consider updating to a version that fixes this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.