Ultimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct requests to (1) admin_members.php, (2) admin_config.php, (3) admin_cat.php, or (4) admin_forum.php.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ultimate_php_board | Ultimate_php_board | 1.0 (including) | 1.0 (including) |
| Ultimate_php_board | Ultimate_php_board | 1.0_beta (including) | 1.0_beta (including) |