← Database

CVE-2006-3797

HIGH CVSS: 7.5 Published: 2006-07-24 Modified: 2026-06-16

Description

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies.

Affected Platforms

Deluxebb Deluxebb

Weakness Type

NVD-CWE-Other

References