VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 16, 2005· Updated Jun 16, 2026

CVE-2005-2005

CVE-2005-2005

Description

Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information on registered users via a direct request to db/users.dat.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Ultimate PHP Board/Ultimate PHP Board4 versions
    cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*
  • Ultimate PHP Board/UPBllm-fuzzy
    Range: <=1.9.6 GOLD

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.