| Package | Affected versions | Patched versions |
|---|---|---|
| ultimate php board | = 1.8= 1.8.2= 1.9= 1.9.6 |
register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "[NR]" sequence in the signature field, which is used to separate multiple records.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free