CVE-2002-1820

Published: Dec 31, 2002Modified: Apr 16, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."

Affected (2)

Products: Ultimate Php Board Project: Ultimate Php Board

Ultimate Php Board Project

1 product

Ultimate Php Board

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ultimate Php Board Project Ultimate Php Board	Version 1.0
Ultimate Php Board Project Ultimate Php Board	Version 1.0 beta

Related CWEs

CWE-178

Improper Handling of Case Sensitivity

The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

References (6)

http://www.iss.net/security_center/static/9972.php

Source: cve@mitre.org

Broken LinkPatch

http://www.securityfocus.com/archive/1/289417

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/5580

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.iss.net/security_center/static/9972.php

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkPatch

http://www.securityfocus.com/archive/1/289417

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/5580

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

Timeline

No history available yet.