VYPR
← All advisories
Unrated severityNVD Advisory· Published May 16, 2005· Updated Jun 16, 2026

CVE-2005-1615

CVE-2005-1615

Description

viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Ultimate PHP Board/Ultimate PHP Board5 versions
    cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*
    • (no CPE)range: 1.8 – 1.9.6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.