149 matches found
CVE-2025-61540
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
CVE-2025-61539
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
EUVD-2025-34758
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
CVE-2025-61540
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
PT-2025-42476
Name of the Vulnerable Software and Affected Versions Ultimate PHP Board version 2.2.7 Description A SQL injection issue exists in Ultimate PHP Board version 2.2.7. The issue is located in the lostpassword.php file, specifically through the username field. Successful exploitation could allow an...
PT-2025-42475
Name of the Vulnerable Software and Affected Versions Ultimate PHP Board version 2.2.7 Description An issue exists in Ultimate PHP Board that allows for cross-site scripting XSS. The issue is located in the lostpassword.php file and involves the u name parameter. Exploitation occurs through...
Ultimate PHP Board security vulnerabilities
Ultimate PHP Board is a message board software from PHP Outburst open source. A security vulnerability exists in Ultimate PHP Board version 2.2.7, which stems from an unvalidated username field in lostpassword.php and could lead to a SQL injection attack...
Ultimate PHP Board security vulnerabilities
Ultimate PHP Board is a message board software from PHP Outburst open source. A security vulnerability exists in Ultimate PHP Board version 2.2.7, which stems from improper handling of the uname parameter in the lostpassword.php file, which could lead to a cross-site scripting attack...
CVE-2025-61539
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
CVE-2025-61539: Improper Neutralization of Input During Web Page Generation
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
CVE-2025-61540: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
CVE-2025-61540
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
CVE-2025-61539
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
CVE-2025-61539
Ultimate PHP Board version 2.2.7 is vulnerable to a Cross-Site Scripting (XSS) attack due to improper handling of the u_name parameter within the lostpassword.php file. An attacker can exploit this by manipulating the parameter to inject and execute malicious scripts. To mitigate this risk, users...
CVE-2025-61540
The message board software Ultimate PHP Board version 2.2.7 is susceptible to a SQL injection vulnerability. The root cause is an unvalidated username field within the lostpassword.php file, which allows an attacker to inject malicious SQL code. Successful exploitation could compromise the underl...
EUVD-2005-2005
Malware in sbrugna...
EUVD-2006-3205
Malware in sbrugna...
EUVD-2002-1800
Malware in sbrugna...