VULNERABILITY INTELLIGENCE
CVE-2006-5511
CVSS score2.6 LOW
EPSS probability1.90%
CISA KEVNot currently listed
Published2006-10-25
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter.