Deluxebb vulnerabilities

Products

• Deluxebb 29

Newest

• deluxebb DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a ... CVE-2011-3725 5.0 MediumSeptember 23, 2011
• deluxebb SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when... CVE-2010-4151 Public exploit 6.8 MediumNovember 3, 2010
• deluxebb SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is... CVE-2010-1859 Public exploit 6.8 MediumMay 7, 2010
• deluxebb Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to... CVE-2009-4468 Public exploit 4.3 MediumDecember 30, 2009
• deluxebb misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email... CVE-2009-4467 Public exploit 4.0 MediumDecember 30, 2009
• deluxebb DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter... CVE-2009-4466 Public exploit 5.0 MediumDecember 30, 2009
• deluxebb DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control,... CVE-2009-4465 Public exploit 7.5 HighDecember 30, 2009
• deluxebb SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to... CVE-2009-1033 Public exploit 7.5 HighMarch 20, 2009
• deluxebb SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is... CVE-2008-6146 Public exploit 6.8 MediumFebruary 16, 2009
• deluxebb Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote... CVE-2008-2195 Public exploit 6.5 MediumMay 14, 2008
• deluxebb SQL injection vulnerability in forums.php in DeluxeBB 1.2 and earlier allows remote attackers to... CVE-2008-2194 Public exploit 7.5 HighMay 14, 2008
• deluxebb Cross-site scripting (XSS) vulnerability in templates/default/admincp/attachments_header.php in... CVE-2008-0439 Public exploit 4.3 MediumJanuary 23, 2008
• deluxebb cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the... CVE-2007-6237 Public exploit 9.0 HighDecember 4, 2007
• deluxebb PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote... CVE-2006-5154 Public exploit 7.5 HighOctober 3, 2006
• deluxebb DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows... CVE-2006-4558 Public exploit 7.5 HighSeptember 6, 2006
• deluxebb DeluxeBB 1.08, and possibly earlier, uses cookies that include the MD5 hash of a password, which... CVE-2006-4080 2.6 LowAugust 11, 2006
• deluxebb Cross-site scripting (XSS) vulnerability in newpost.php in DeluxeBB 1.08, and possibly earlier,... CVE-2006-4079 6.8 MediumAugust 11, 2006
• deluxebb pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to... CVE-2006-4078 7.5 HighAugust 11, 2006
• deluxebb DeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms... CVE-2006-3799 7.5 HighJuly 21, 2006
• deluxebb DeluxeBB 1.07 and earlier allows remote attackers to overwrite the (1) _GET, (2) _POST, (3) _ENV,... CVE-2006-3798 5.0 MediumJuly 21, 2006
• deluxebb SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass... CVE-2006-3797 7.5 HighJuly 21, 2006
• deluxebb DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space... CVE-2006-3796 7.5 HighJuly 21, 2006
• deluxebb Multiple cross-site scripting (XSS) vulnerabilities in DeluxeBB before 1.08 allow remote... CVE-2006-3795 2.6 LowJuly 21, 2006
• deluxebb SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to... CVE-2006-3304 Public exploit 7.5 HighJune 29, 2006
• deluxebb Multiple cross-site scripting (XSS) vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow... CVE-2006-3303 4.3 MediumJune 29, 2006
• deluxebb Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute... CVE-2006-2915 5.1 MediumJune 23, 2006
• deluxebb PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute... CVE-2006-2914 Public exploit EPSS 20.7% 5.1 MediumJune 23, 2006
• deluxebb SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute... CVE-2006-2503 Public exploit 7.5 HighMay 22, 2006
• deluxebb Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to... CVE-2005-2989 Public exploit 7.5 HighSeptember 19, 2005