CVE-2005-2003

Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id parameter to (1) viewtopic.php, (2) profile.php, or (3) newpost.php, which reveals the path in an error message.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-06-16

Last modified

2024-08-07

Affected products

• Ultimate Php Board (Ultimate Php Board)

References

• http://marc.info/?l=bugtraq&m=111893777504821&w=2
• http://secunia.com/advisories/15732