VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 24, 2006· Updated Jun 16, 2026

CVE-2006-3204

CVE-2006-3204

Description

Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote attackers to determine a suitable decryption key given the plaintext and ciphertext by obtaining the plaintext password, which is sent when logging in, and the ciphertext, which is set in the pass_env cookie.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Ultimate PHP Board/Ultimate PHP Board5 versions
    cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*
    • cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*
    • (no CPE)range: <=1.9.6

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.