Vulnerability in Ultimate PHP Board
CVE-2006-3205
Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power_env, and id_env parameters in a cookie, which comprise a persistent logon that does not vary across sessions.
EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.
Affected products
- Ultimate_php_board — versions 1.8, 1.8.2, 1.9
- N/a — versions n/a
References
- cve@mitre.org (URL Repurposed, x_refsource_MISC)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)