CVE-2003-0395 in Ultimate PHP Board UPB

Summary

Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 06/10/2003
• Disclosure: 07/02/2003
• Moderation: VulDB entry created
• Entries: 1: VDB-20596
• CPE: ready
• CWE: CWE-269 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.07477
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0395
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0395
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0395/