high7.5
CVE-2006-4078
pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the m…
Impact
pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deluxebb | Deluxebb | Version 1.08 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21387
- http://securityreason.com/securityalert/1381
- http://www.osvdb.org/27834
- http://www.securityfocus.com/archive/1/442464/100/0/threaded
- http://www.securityfocus.com/bid/19418
- http://www.vupen.com/english/advisories/2006/3188
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28270
- http://secunia.com/advisories/21387
- http://securityreason.com/securityalert/1381
- http://www.osvdb.org/27834
- http://www.securityfocus.com/archive/1/442464/100/0/threaded
- http://www.securityfocus.com/bid/19418
- http://www.vupen.com/english/advisories/2006/3188
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28270