CVE-2025-61540 | Ultimate PHP Board 2.2.7 lostpassword.php Username sql injection

A vulnerability was found in Ultimate PHP Board 2.2.7. It has been declared as critical. This impacts an unknown function of the file lostpassword.php. Executing manipulation of the argument Username can lead to sql injection.

This vulnerability is registered as CVE-2025-61540. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More