CVE-2006-3203 The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges.
HighCVSS 10.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ultimate php board | = 1.8 | No fix listed |
| ultimate php board | = 1.8.2 | No fix listed |
| ultimate php board | = 1.9 | No fix listed |
| ultimate php board | = 1.9.6 | No fix listed |
References
- 1138 exploit third-party-advisory
- www.kliconsulting.com exploit patch url-repurposed
- 20060620 ULtimate PHP Board <= 1.96 GOLD Code Execution (exploit code) mailing-list