Show filters
55 Total Results
Displaying 41-50 of 55
Sort by:
Attacker Value
Unknown
CVE-2006-3796
Disclosure Date: July 24, 2006 (last updated October 04, 2023)
DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character, which allows remote authenticated users to login as the "space" user, post as the guest user, and block the ability of an administrator to ban the "space" user.
0
Attacker Value
Unknown
CVE-2006-3798
Disclosure Date: July 24, 2006 (last updated October 04, 2023)
DeluxeBB 1.07 and earlier allows remote attackers to overwrite the (1) _GET, (2) _POST, (3) _ENV, and (4) _SERVER variables via the _COOKIE (aka COOKIE) variable, which can overwrite the other variables during an extract function call, probably leading to multiple security vulnerabilities, aka "pollution of the global namespace."
0
Attacker Value
Unknown
CVE-2006-3304
Disclosure Date: June 29, 2006 (last updated October 04, 2023)
SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn parameter.
0
Attacker Value
Unknown
CVE-2006-3303
Disclosure Date: June 29, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) to parameters.
0
Attacker Value
Unknown
CVE-2006-2915
Disclosure Date: June 23, 2006 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex, (3) xthetimeoffset, and (4) xthetimeformat parameters during account registration.
0
Attacker Value
Unknown
CVE-2006-2914
Disclosure Date: June 23, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder parameter to (1) postreply.php, (2) posting.php, (3) and pm/newpm.php in the deluxe/ directory, and (4) postreply.php, (5) posting.php, and (6) pm/newpm.php in the default/ directory.
0
Attacker Value
Unknown
CVE-2006-2503
Disclosure Date: May 22, 2006 (last updated October 04, 2023)
SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via the name parameter.
0
Attacker Value
Unknown
CVE-2006-1108
Disclosure Date: March 09, 2006 (last updated February 22, 2025)
SQL injection vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2006-1107
Disclosure Date: March 09, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter.
0
Attacker Value
Unknown
CVE-2006-0926
Disclosure Date: February 28, 2006 (last updated February 22, 2025)
Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.
0
