I am having the same problem with a forum I'm managing (UBB v.7.5.3). I'm new to the problem and having a terrible time isolating the hack. There have been so many cooks in the kitchen, it would be nearly impossible to isolate by looking at the access logs.

The referenced patch is from last year - is that correct?

I've considered just replacing all the UBB files.