PT-2005-2595 · Unknown · Ultimate Php Board

Morinex · Published 2005-05-16 · Updated 2016-10-18 · CVE-2005-1616

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ultimate PHP Board (UPB) versions 1.8 through 1.9.6

Description The issue allows remote attackers to obtain sensitive information. This is achieved by providing an invalid id or possibly postorder parameter to the viewforum.php file, which reveals the path in an error message when a file cannot be opened.

Recommendations For Ultimate PHP Board (UPB) versions 1.8 through 1.9.6, consider restricting access to the viewforum.php file until a fix is available, or avoid using invalid id or postorder parameters to prevent information disclosure.

Fix

Related Identifiers

CVE-2005-1616

Affected Products

Ultimate Php Board

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-1616 · Security Note
• http://marc.info/?l=bugtraq&m=111600262424876&w=2 · Note