← Database

CVE-2006-6790

HIGH CVSS: 7.5 Published: 2006-12-28 Modified: 2026-06-16

Description

Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username parameter, which is injected into chat/text.php.

Affected Platforms

Ultimate Php Board Ultimate Php Board

Weakness Type

NVD-CWE-Other

References