low2.6
CVE-2006-4080
DeluxeBB 1.08, and possibly earlier, uses cookies that include the MD5 hash of a password, which allows remote attackers to gain privileges by sniffing or cros…
Impact
DeluxeBB 1.08, and possibly earlier, uses cookies that include the MD5 hash of a password, which allows remote attackers to gain privileges by sniffing or cross-site scripting (XSS) and conduct password guessing attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deluxebb | Deluxebb | through 1.08 Versions 1.0, 1.05, 1.06, 1.07 |