PT-2005-2594 · Unknown · Ultimate Php Board

Morinex · Publicado 2005-05-16 · Atualizado 2016-10-18 · CVE-2005-1615

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ultimate PHP Board (UPB) versions 1.8 through 1.9.6

Description The issue allows remote attackers to read sensitive data. This is possibly due to a SQL injection vulnerability, where the postorder parameter is not properly handled by textdb.inc.php in viewforum.php.

Recommendations For Ultimate PHP Board (UPB) versions 1.8 through 1.9.6, consider restricting access to the viewforum.php page until a proper fix is applied, and avoid using the postorder parameter in this context to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-1615

Produtos afetados

Ultimate Php Board

Referências · 4

• 🔥 https://exploit-db.com/exploits/25655 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1615 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111600262424876&w=2 · Nota
• http://securityfocus.com/bid/13622 · Nota