Description
The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges.
References
- http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt
- 1138 third-party-advisory
- 20060620 ULtimate PHP Board <= 1.96 GOLD Code Execution (exploit code) mailing-list