Myupb

7 CVEs across 3 Myupb products. Browse Myupb vulnerabilities, severities, and proof-of-concept exploits.

Myupb products with known CVEs

ProductCVEs
Ultimate PHP Board4
Flat PHP Board2
Upb1
Myupb CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-61540Medium6.52025-10-16SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php.
CVE-2025-61539Medium6.12025-10-16Cross site scripting (XSS) vulnerability in Ultimate PHP Board 2.2.7 via the u_name parameter in lostpassword.php.
CVE-2015-22172015-03-10Multiple cross-site scripting (XSS) vulnerabilities in Ultimate PHP Board (aka myUPB) before 2.2.8 allow remote attackers to inject arbitrary web script or HTM…
CVE-2008-67272009-04-20Cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web scr…
CVE-2007-63992007-12-17index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current user account by reading the password param…
CVE-2007-63962007-12-17Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to inject arbitrary PHP code via the (1) user…
CVE-2003-03952003-07-02Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in…