CVE-2003-0395
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB...
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
Exploit likelihood
What each source reports
NVD Score used
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
- Record
CVE-2003-0395- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
- Record
CVE-2003-0395- Updated
- 2026-11-02
EUVDEUVD-2003-0389 No score
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
- Record
EUVD-2003-0389- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wf6v-m5v4-phr8 No score
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB...
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
- Record
GHSA-wf6v-m5v4-phr8- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Ultimate PHP Board 1.9 - 'admin_iplog.php' Arbitrary PHP Execution | 2003-05-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0395 is a high vulnerability (CVSS 7.5) in Myupb Ultimate Php Board, published June 10, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.53%, the 85th percentile. No source names a fixed version.