Description
Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex, (3) xthetimeoffset, and (4) xthetimeformat parameters during account registration.
References
- 20060628 Secunia Research: DeluxeBB SQL Injection and File InclusionVulnerabilities mailing-list
- 26457 vdb-entry
- 20152 third-party-advisory
- 1016309 vdb-entry
- http://secunia.com/secunia_research/2006-44/advisory
- ADV-2006-2347 vdb-entry
- 18453 vdb-entry
- 20060614 Secunia Research: DeluxeBB SQL Injection and File InclusionVulnerabilities mailing-list
- 1134 third-party-advisory
- deluxebb-accountreg-sql-injection(27091) vdb-entry