Description (CNA)
Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/5858
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html
- http://www.iss.net/security_center/static/10300.php
ADP enrichment
No English description supplied.