CVE:CVE-2002-2322
CNNVD:CNNVD-200212-289
Ultimate PHP Board (UPB) 1.0b版本在没有足够访问控制的web根目录下存储users.dat数据文件。远程攻击者获得用户名和密码。
solution:Upgrade ultimate_php_board ultimate_php_board to a higher version than 1.0_beta,and avoid the version 1.0_beta