231 matches found
CVE-2025-61540
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
CVE-2025-61539
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
EUVD-2025-34758
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
CVE-2025-61540
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
CVE-2025-61539: Improper Neutralization of Input During Web Page Generation
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
Ultimate PHP Board security vulnerabilities
Ultimate PHP Board is a message board software from PHP Outburst open source. A security vulnerability exists in Ultimate PHP Board version 2.2.7, which stems from improper handling of the uname parameter in the lostpassword.php file, which could lead to a cross-site scripting attack...
Ultimate PHP Board security vulnerabilities
Ultimate PHP Board is a message board software from PHP Outburst open source. A security vulnerability exists in Ultimate PHP Board version 2.2.7, which stems from an unvalidated username field in lostpassword.php and could lead to a SQL injection attack...
CVE-2025-61540
The message board software Ultimate PHP Board version 2.2.7 is susceptible to a SQL injection vulnerability. The root cause is an unvalidated username field within the lostpassword.php file, which allows an attacker to inject malicious SQL code. Successful exploitation could compromise the underl...
PT-2025-42475
Name of the Vulnerable Software and Affected Versions Ultimate PHP Board version 2.2.7 Description An issue exists in Ultimate PHP Board that allows for cross-site scripting XSS. The issue is located in the lostpassword.php file and involves the u name parameter. Exploitation occurs through...
CVE-2025-61539
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
PT-2025-42476
Name of the Vulnerable Software and Affected Versions Ultimate PHP Board version 2.2.7 Description A SQL injection issue exists in Ultimate PHP Board version 2.2.7. The issue is located in the lostpassword.php file, specifically through the username field. Successful exploitation could allow an...
CVE-2025-61540: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
CVE-2025-61539
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
CVE-2025-61539
Ultimate PHP Board version 2.2.7 is vulnerable to a Cross-Site Scripting (XSS) attack due to improper handling of the u_name parameter within the lostpassword.php file. An attacker can exploit this by manipulating the parameter to inject and execute malicious scripts. To mitigate this risk, users...
CVE-2025-61540
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
EUVD-2003-1391
Malware in sbrugna...
EUVD-2007-6361
Malware in sbrugna...
EUVD-2007-6365
Malware in sbrugna...