Vulnerability index

Browse CVEs

9 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Deluxebb MEDIUM 5.0
CVE-2011-3725

DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an e…

No fix yet
Fix from $1,600 2011-09-23
Deluxebb HIGH 7.5
CVE-2009-4465

DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and confi…

No fix yet
Fix from $1,950 2009-12-30
Deluxebb MEDIUM 5.0
CVE-2009-4466

DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which reveals the installation path in…

No fix yet
Fix from $1,600 2009-12-30
Deluxebb HIGH 9.0
CVE-2007-6237

cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during a profile update, which allows…

Mitigation only
Fix from $1,950 2007-12-04
Deluxebb HIGH 7.5
CVE-2006-3797

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (…

Mitigation only
Fix from $1,950 2006-07-24
Deluxebb MEDIUM 5.0
CVE-2006-3798

DeluxeBB 1.07 and earlier allows remote attackers to overwrite the (1) _GET, (2) _POST, (3) _ENV, and (4) _SERVER variables via the _COOKIE (aka COOK…

Mitigation only
Fix from $1,600 2006-07-24
Deluxebb MEDIUM 5.1
CVE-2006-2915

Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex…

Mitigation only
Fix from $1,600 2006-06-23
Deluxebb MEDIUM 5.1
CVE-2006-2914EPSS 21%

PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder parameter …

No fix yet
Fix from $1,600 2006-06-23
Deluxebb HIGH 7.5
CVE-2006-2503

SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via the name parameter.

No fix yet
Fix from $1,950 2006-05-22