Files
cve/cves/2006/CVE-2006-6790.md

720 B

CVE-2006-6790

Description

Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username parameter, which is injected into chat/text.php.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB