peter bassill · operator
$ cve CVE-2005-2030 JSON

CVE-2005-2030 EXPLOIT

5.0
MEDIUM · CVSS 2.0 · EPSS 3% (pctl 87)

Patch early

A public exploit exists.

Description

Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat.

Scoring

CVSS5.0 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS3% — more likely to be exploited than 87% of all CVEs
On CISA KEVno
Public exploityes
Published2005-06-16
Last modified2026-06-16

Affected (1)

VendorProduct
ultimate php boardultimate php board

Public exploits

SourceTitleDate
exploit-dbUltimate PHP Board 1.8/1.9 - Weak Password Encryption2005-06-16

References

→ the Explorer  ·  watch your stack  ·  NVD