medium4.0Public exploit code
CVE-2009-4467
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DeluxeBB 1.3 - Multiple Vulnerabilities2009-12-22 · webapps · php · Verified
Impact
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deluxebb | Deluxebb | Version 1.3 |