Description
Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords.
References
- 5858 vdb-entry
- 20021002 Multiple Web Security Holes mailing-list
- upb-url-view-php(10300) vdb-entry