NetSight
medium5.0

CVE-2006-3206

register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "[NR]" sequence in the signature field,…

Impact

register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "[NR]" sequence in the signature field, which is used to separate multiple records.

Affected products

VendorProductAffected versions
Ultimate Php BoardUltimate Php Board
Versions 1.8, 1.8.2, 1.9, 1.9.6

References