Back
CVE-2005-1614
Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the postorder parameter.
Published: May 16, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (4)
| Vendor | Product | Version |
|---|---|---|
| ultimate_php_board | ultimate_php_board | 1.8 |
| ultimate_php_board | ultimate_php_board | 1.8.2 |
| ultimate_php_board | ultimate_php_board | 1.9 |
| ultimate_php_board | ultimate_php_board | 1.9.6 |
GitHub Security Advisory GHSA-9527-2v9j-mcpv
Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through...
References (4)
- http://marc.info/?l=bugtraq&m=111600262424876&w=2
- http://www.securityfocus.com/bid/13621 Exploit, Vendor Advisory
- http://marc.info/?l=bugtraq&m=111600262424876&w=2
- http://www.securityfocus.com/bid/13621 Exploit, Vendor Advisory
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
3.65%
Top 11% most likely to be exploited
Threat Score
28.3 / 100
Data Sources
NVD
EPSS
GitHub