← back
CVE-2005-1615

CVE-2005-1615

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.1%
from disclosure to weapon0 days
Published on NVDMay 16
1st PoCMay 13
exploitation probability
2.1%top 20% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.