Ultimate PHP Board Private Message Disclosure Vulnerability

Bugtraq ID:	4600
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 25 2002 12:00AM
Updated:	Apr 25 2002 12:00AM
Credit:	Discovery of this issue is credited to frog frog <[email protected]>.
Vulnerable:	X-Crew Ultimate PHP Board 1.0 Beta - Apache Apache 1.3.24 - Apache Apache 1.3.24 - Apache Apache 1.3.23 - Apache Apache 1.3.23 - Apache Apache 1.3.22 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.19
Not Vulnerable:	X-Crew Ultimate PHP Board 1.1 - Apache Apache 1.3.24 - Apache Apache 1.3.24 - Apache Apache 1.3.23 - Apache Apache 1.3.23 - Apache Apache 1.3.22 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.19

Ultimate PHP Board Private Message Disclosure Vulnerability

Solution:
It has been reported that this issue is not present in version 1.1 of Ultimate PHP Board. Users are advised to upgrade.


X-Crew Ultimate PHP Board 1.0 Beta

• X-Crew Ultimate PHP Board 1.1
  http://www.tritanium-scripts.de/download/download.php?script_id=1

Ultimate PHP Board Private Message Disclosure Vulnerability

References:

• Security holes : Ultimate PHP Board (frog frog )
  
• X-Crew Homepage (X-Crew)