CVE-2006-5511: Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, all

JaxUltraBB (JUBB) 2.0 has a direct static code injection vulnerability (a weakness that lets attackers insert malicious code) in its delete.php file when register_globals is enabled (a PHP setting that automatically creates variables from user input). Remote attackers can inject arbitrary web script, HTML, or PHP code through the contents parameter, which gets added to a file specified by the forum parameter.