CVE-2006-5511

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.86%

Published

Oct 25, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBJaxUltraBB 2.0 - 'delete.php' Remote Auto Deface TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter.

Affected Products (1)

jaxultrabb · jaxultrabbvulnerable

References (8)

http://attrition.org/pipermail/vim/2006-October/001095.html

Exploit

http://www.securityfocus.com/bid/20679

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/29711

https://www.exploit-db.com/exploits/2616

http://attrition.org/pipermail/vim/2006-October/001095.html

Exploit

http://www.securityfocus.com/bid/20679

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/29711

https://www.exploit-db.com/exploits/2616

KEV Catalog EPSS Scores Vendors All CVEs