high7.5
CVE-2006-3797
SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberp…
Impact
SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deluxebb | Deluxebb | Versions 1.05, 1.06, 1.07 |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html
- http://securityreason.com/securityalert/1254
- http://www.securityfocus.com/archive/1/440435/100/0/threaded
- http://www.securityfocus.com/bid/19052
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27835
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html
- http://securityreason.com/securityalert/1254
- http://www.securityfocus.com/archive/1/440435/100/0/threaded
- http://www.securityfocus.com/bid/19052
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27835