PT-2005-2973 · Upb · Ultimate Php Board
Alberto Trivero
·
Published
2005-06-16
·
Updated
2016-10-18
·
CVE-2005-2030
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Ultimate PHP Board (UPB) version 1.9.6 GOLD
Description
The issue concerns weak encryption used for passwords in the users.dat file. This weakness allows attackers to easily decrypt the passwords, potentially gaining privileges.
Recommendations
For Ultimate PHP Board (UPB) version 1.9.6 GOLD, update the password encryption method to a stronger one to prevent easy decryption by attackers.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ultimate Php Board