Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/13975 | Exploit |
http://marc.info/?l=bugtraq&m=111893777504821&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-06-15 21:00
Updated : 2016-10-17 20:24
NVD link : CVE-2005-2030
Mitre link : CVE-2005-2030
JSON object : View
CWE
Products Affected
ultimate_php_board
- ultimate_php_board