CVE-2002-2276

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message.

Affected (1)

Products: Ultimate Php Board: Ultimate Php Board

Ultimate Php Board

1 product

Ultimate Php Board

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ultimate Php Board Ultimate Php Board	Version 1.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://archives.neohapsis.com/archives/bugtraq/2002-12/0071.html

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/6333

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/10788

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2002-12/0071.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/6333

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/10788

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.