Search vulnerabilities

Results 2

Export CSV
CVE-2002-1820

register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed