← Database

CVE-2006-4078

HIGH CVSS: 7.5 Published: 2006-08-11 Modified: 2026-06-16

Description

pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.

Affected Platforms

Deluxebb Deluxebb

Weakness Type

NVD-CWE-Other

References