Vulnerability in Ultimate PHP Board
CVE-2006-3206
register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "[NR]" sequence in the signature field, which is used to separate multiple records.
EPSS: 0.010 (60.6th percentile) — read the EPSS interpretation.
Affected products
- Ultimate_php_board — versions 1.8, 1.8.2, 1.9
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)