VYPR
← All advisories
Unrated severityNVD Advisory· Published May 16, 2005· Updated Jun 16, 2026

CVE-2005-1616

CVE-2005-1616

Description

viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or possibly (2) postorder parameter, which reveals the path in an error message when a file can not be opened.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Ultimate PHP Board/Ultimate PHP Board4 versions
    cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*
  • Ultimate PHP Board/UPBllm-fuzzy
    Range: >=1.8 <=1.9.6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.