CVE-2006-3203

Опубликовано: 24 июн. 2006

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges.

Ссылки

http://securityreason.com/securityalert/1138
Exploit
http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt
Exploit
Patch
URL Repurposed
http://www.securityfocus.com/archive/1/437875/100/0/threaded
http://securityreason.com/securityalert/1138
Exploit
http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt
Exploit
Patch
URL Repurposed
http://www.securityfocus.com/archive/1/437875/100/0/threaded

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*

cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*

cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*

cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01245

Низкий

10 Critical

CVSS2

Дефекты

CWE-255

Связанные уязвимости

GHSA-gcg8-f2vw-5hcp

github

почти 4 года назад