CVE-2002-1820
CriticalSummary
The register.php file in Ultimate PHP Board (UPB) 1.0 and 1.0b allows a remote attacker to impersonate the administrator by registering an account name of 'admin' with a lowercase 'a,' while the administrative account is 'Admin' with an uppercase 'A.'
Risk Assessment
An attacker could gain access to administrative functions, posing a serious threat to the security of the system and user data.
Recommendation
It is recommended to change the registration mechanism to prevent the registration of account names that could impersonate administrative accounts.
Original NVD description (English source)
register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."