CVE-2003-0395 Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed...
HighCVSS 7.5
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| myupb ultimate php board | = 1.9 | No fix listed |
References
- f0kp.iplus.ru broken-link
- 20030524 UPB: Discussion Board/Web-Site Takeover mailing-list third-party-advisory