CVE-2005-1615

viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.06% chance of exploitation in the next 30 days, 80th percentile

Published

2005-05-16

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25655

References

• CVE Record
• NVD entry

Related

• CVE-2005-1614
• CVE-2005-1618
• CVE-2005-1613
• CVE-2005-1619
• CVE-2005-1612
• CVE-2005-1620