Browse CVEs

MEDIUM 5.0 CVE-2011-3725 DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an e… Deluxebb No fix yet Fix from $1,6002011-09-23 HIGH 7.5 CVE-2009-4465 DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and confi… Deluxebb No fix yet Fix from $1,9502009-12-30 MEDIUM 5.0 CVE-2009-4466 DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which reveals the installation path in… Deluxebb No fix yet Fix from $1,6002009-12-30 HIGH 9.0 CVE-2007-6237 cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during a profile update, which allows… Deluxebb Mitigation only Fix from $1,9502007-12-04 HIGH 7.5 CVE-2006-3797 SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (… Deluxebb Mitigation only Fix from $1,9502006-07-24 MEDIUM 5.0 CVE-2006-3798 DeluxeBB 1.07 and earlier allows remote attackers to overwrite the (1) _GET, (2) _POST, (3) _ENV, and (4) _SERVER variables via the _COOKIE (aka COOK… Deluxebb Mitigation only Fix from $1,6002006-07-24 MEDIUM 5.1 CVE-2006-2915 Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex… Deluxebb Mitigation only Fix from $1,6002006-06-23 MEDIUM 5.1 CVE-2006-2914EPSS 21% PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder parameter … Deluxebb No fix yet Fix from $1,6002006-06-23 HIGH 7.5 CVE-2006-2503 SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via the name parameter. Deluxebb No fix yet Fix from $1,9502006-05-22