Known Vulnerabilities for products from Ultimate Php Board
Listed below are 18 of the newest known vulnerabilities associated with the vendor "Ultimate Php Board".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2006-7169 json | PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows remo... | Not Provided | 2007-03-20 | 2026-04-23 |
| CVE-2006-6790 json | Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remote atta... | Not Provided | 2006-12-28 | 2026-04-23 |
| CVE-2006-3208 json | Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administ... | 6.5 - MEDIUM | 2006-06-24 | 2018-10-18 |
| CVE-2006-3207 json | Directory traversal vulnerability in newpost.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to ove... | 5 - MEDIUM | 2006-06-24 | 2018-10-18 |
| CVE-2006-3206 json | register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "[NR]... | 5 - MEDIUM | 2006-06-24 | 2018-10-18 |
| CVE-2006-3205 json | Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power_env,... | 5 - MEDIUM | 2006-06-24 | 2018-10-18 |
| CVE-2006-3204 json | Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which... | 5 - MEDIUM | 2006-06-24 | 2018-10-18 |
| CVE-2006-3203 json | The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, w... | 10 - HIGH | 2006-06-24 | 2018-10-18 |
| CVE-2005-2030 json | Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easil... | Not Provided | 2005-06-16 | 2025-04-03 |
| CVE-2005-2005 json | Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient acces... | Not Provided | 2005-06-16 | 2025-04-03 |
| CVE-2005-2004 json | Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to in... | Not Provided | 2005-06-17 | 2025-04-03 |
| CVE-2005-2003 json | Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id paramete... | Not Provided | 2005-06-16 | 2025-04-03 |
| CVE-2005-1616 json | viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an in... | Not Provided | 2005-05-16 | 2025-04-03 |
| CVE-2005-1615 json | viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postord... | Not Provided | 2005-05-16 | 2025-04-03 |
| CVE-2005-1614 json | Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attacke... | Not Provided | 2005-05-16 | 2025-04-03 |
| CVE-2002-2322 json | Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allow... | Not Provided | 2002-12-31 | 2025-04-03 |
| CVE-2002-2276 json | Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to a... | Not Provided | 2002-12-31 | 2025-04-03 |
| CVE-2002-1821 json | Ultimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions v... | Not Provided | 2002-12-31 | 2025-04-03 |