Description
Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Alberto Trivero · perlwebappsphp
https://www.exploit-db.com/exploits/25838
Scores
EPSS
0.0155
EPSS Percentile
81.5%
Details
Status
published
Products (4)
ultimate_php_board/ultimate_php_board
1.8
ultimate_php_board/ultimate_php_board
1.8.2
ultimate_php_board/ultimate_php_board
1.9
ultimate_php_board/ultimate_php_board
1.9.6
Published
Jun 16, 2005
Tracked Since
Feb 18, 2026