system
Describe <CVE-2006-6790>.
user
What is <CVE-2006-6790>?
assistant
Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username parameter, which is injected into chat/text.php..