5
CVE-2006-3205
- EPSS 1.35%
- Veröffentlicht 24.06.2006 01:06:00
- Zuletzt bearbeitet 16.06.2026 22:26:37
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginUltimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power_env, and id_env parameters in a cookie, which comprise a persistent logon that does not vary across sessions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ultimate Php Board ≫ Ultimate Php Board Version1.8
Ultimate Php Board ≫ Ultimate Php Board Version1.8.2
Ultimate Php Board ≫ Ultimate Php Board Version1.9
Ultimate Php Board ≫ Ultimate Php Board Version1.9.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.35% | 0.679 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://securityreason.com/securityalert/1138
http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt
http://www.securityfocus.com/archive/1/437875/100/0/threaded