CVE-2006-5511

Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject…

published October 25, 2006

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01899 · 79.5th percentile
Published
2006-10-25T22:00Z
EPSS history
Timeline
  • 25 OCT 22:00Z
    Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject…
    cvelistv5