7.5
CVSSv2

CVE-2005-1615

Published: 16/05/2005 Updated: 18/10/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

viewforum.php in Ultimate PHP Board (UPB) 1.8 up to and including 1.9.6 may allow remote malicious users to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability.

Vulnerable Product Search on Vulmon Subscribe to Product

ultimate php board ultimate php board 1.8.2

ultimate php board ultimate php board 1.9

ultimate php board ultimate php board 1.9.6

ultimate php board ultimate php board 1.8

Exploits

source: wwwsecurityfocuscom/bid/13622/info Ultimate PHP Board is prone to an SQL injection vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query Successful exploitation could result in a compromise of the application, disclosure or modification of data, ...