Critical severity9.8NVD Advisory· Published Dec 31, 2002· Updated Apr 16, 2026
CVE-2002-1820
CVE-2002-1820
Description
register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."
Affected products
2cpe:2.3:a:ultimate_php_board_project:ultimate_php_board:1.0:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ultimate_php_board_project:ultimate_php_board:1.0:-:*:*:*:*:*:*
- cpe:2.3:a:ultimate_php_board_project:ultimate_php_board:1.0:beta:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.iss.net/security_center/static/9972.phpnvdBroken LinkPatch
- www.securityfocus.com/archive/1/289417nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/5580nvdBroken LinkThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.