CVE:CVE-2006-3206
CNNVD:CNNVD-200606-480
Ultimate PHP Board (UPB) 1.9.6及之前版本中的register.php可以使远程攻击者借助用于分隔多个记录的signature字段中的"[NR]" 序列，创建任意账户。
solution:Upgrade ultimate_php_board ultimate_php_board to a higher version than 1.8,1.8.2,1.9,1.9.6,and avoid the version 1.8,1.8.2,1.9,1.9.6