Unscored CVE-2006-3797 EUVD-2006-3791GHSA-qcw6-fjfq-668w

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings…

Published Jul 21, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies.

References

1254 third-party-advisory
deluxebb-member-sql-injection(27835) vdb-entry
19052 vdb-entry
20060718 Advisory : DeluxeBB mutiple vulnerabilities mailing-list
20060718 DeluxeBB mutiple vulnerabilities mailing-list