CVE-2005-1648

Gurgens GASoft Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords...

CVE-2005-1648: Undefined Security Weakness

Gurgens GASoft Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords...

[SA15374] Ultimate Forum Exposure of Encrypted User Credentials

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Ultimate Forum Exposure of Encrypted User Credentials...

CVE-2005-1614

Cross-site scripting XSS vulnerability in viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the postorder parameter...

CVE-2005-1615

viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability...

CVE-2005-1615

Ultimate PHP Board (UPB) versions 1.8 through 1.9.6 are affected by a vulnerability in viewforum.php where the postorder parameter is not properly handled by textdb.inc.php, potentially allowing remote attackers to read sensitive data via a SQL injection-like flaw. Multiple sources (CVE records a...

CVE-2005-1616

CVE-2005-1616 concerns Ultimate PHP Board (UPB). The connected docs show that UPB versions up to 1.9.6 (i.e.,

CVE-2005-1616

viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid 1 id or possibly 2 postorder parameter, which reveals the path in an error message when a file can not be opened...

CVE-2005-1616

viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid 1 id or possibly 2 postorder parameter, which reveals the path in an error message when a file can not be opened...

CVE-2005-1614

Vulnerability overview (CVE-2005-1614) : The UPB (Ultimate PHP Board) versions 1.8 through 1.9.6 are affected by a cross-site scripting (XSS) flaw in the viewforum.php script, exploitable via the postorder parameter. This can allow remote attackers to inject arbitrary script/HTML. The NVD reports...

CVE-2005-1615: Undefined Security Weakness

viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability...

CVE-2005-1616: Undefined Security Weakness

viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid 1 id or possibly 2 postorder parameter, which reveals the path in an error message when a file can not be opened...

CVE-2005-1614: Undefined Security Weakness

Cross-site scripting XSS vulnerability in viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the postorder parameter...

Ultimate PHP Board < 1.9.7 viewforum.php Multiple Vulnerabilities

The remote host is running Ultimate PHP Board UPB. The remote version of this software is vulnerable to cross-site scripting attacks, and SQL injection flaws. Using a specially crafted URL, an attacker may execute arbitrary commands against the remote SQL database or use the remote server to set ...

Ultimate PHP Board 1.81.9 - viewforum.php SQL Injection

Ultimate PHP Board 1.81.9 - viewforum.php SQL Injection source: https://www.securityfocus.com/bid/13622/info Ultimate PHP Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Ultimate PHP Board 1.81.9 - viewforum.php Cross-Site Scripting

Ultimate PHP Board 1.81.9 - viewforum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13621/info Ultimate PHP Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

Ultimate PHP Board &#40;UPB&#41; Security Advisory

Ultimate PHP Board UPB Security Advisory By : Morinex e-mail : morinexatmarocmafia com date : 13-05-2k5 shoutz : w00pie.nl - Woopie Target : Ultimate PHP Board UPB Vulnerable Versions: v. 1.8 until v 1.9.6 URL : http://www.myupb.com - http://www.myupb.com/forum/ Tested Localhost , Myupb.com. UPB ...

CVE-2005-0212

The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of service infinite loop via a zero byte UDP packet...

CVE-2005-0212

The CVE-2005-0212 entry concerns the Amp II engine used by Gore: Ultimate Soldier (1.50 and earlier). The vulnerability allows remote attackers to trigger a denial of service (infinite loop) by sending a zero-byte UDP packet, impacting availability. The issue is documented with a MEDIUM base scor...

CVE-2005-0212: Undefined Security Weakness

The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of service infinite loop via a zero byte UDP packet...