CVE-2006-5511 | BDVDB-2026-19956 Detail

Description#

Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/29711
http://www.securityfocus.com/bid/20679
http://attrition.org/pipermail/vim/2006-October/001095.html
https://www.exploit-db.com/exploits/2616

Exploit#

https://www.exploit-db.com/exploits/2616

History#

Version 12006-10-25Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.