CVE:CVE-2006-6790
CNNVD:CNNVD-200612-562
Ultimate PHP Board(UPB)2.0b1及更早版本中的chat/login.php存在直接静态代码注入漏洞，远程攻击者可以通过用户名参数(注入到chat/text.php中)来注入任意PHP代码。
solution:Upgrade ultimate_php_board ultimate_php_board to a higher version than 2.0_beta_1,and avoid the version (,2.0_beta_1]