Description
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
References
- 20000211 perl-cgi hole in UltimateBB by Infopop Corp. mailing-list
- 20000225 FW: Important UBB News For Licensed Users mailing-list
- http://www.ultimatebb.com/home/versions.shtml
- 991 vdb-entry