CVE-2002-1820

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."

Ссылки

http://www.iss.net/security_center/static/9972.php
Broken Link
Patch
http://www.securityfocus.com/archive/1/289417
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/5580
Broken Link
Third Party Advisory
VDB Entry
http://www.iss.net/security_center/static/9972.php
Broken Link
Patch
http://www.securityfocus.com/archive/1/289417
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/5580
Broken Link
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ultimate_php_board_project:ultimate_php_board:1.0:-:*:*:*:*:*:*

cpe:2.3:a:ultimate_php_board_project:ultimate_php_board:1.0:beta:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01529

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-178

Связанные уязвимости

GHSA-6c7r-27gf-58jj