Infopop Ultimate Bulletin Board (UBB) allows remote malicious users to execute commands via shell metacharacters in the topic hidden field.
infopop ultimate bulletin board 5.43