CVE-2003-0395: Myupb Ultimate PHP Board

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.

Affected products

• Myupb Ultimate PHP Board: version 1.9 only

Published 2003-07-02. Last modified 2026-06-16.