DeluxeBB 1.3
Approved changes feed: RSS · Atom
cpe:2.3:a:deluxebb:deluxebb:1.3:*:*:*:*:*:*:*part: a version: 1.3 update: *
| Vendor | Deluxebb (9637c25c-dafa-5ca2-bcbb-ae263ef132f7) |
|---|---|
| Product | Deluxebb (4dfce013-cc33-5a5b-86cf-1ff00f58211d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-3725 |
vulnerable | 2026-06-08 04:59:27.756518 |
Details available
DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by header_html.php.
Published: 2011-09-23T23:00:00.000Z
Updated: 2024-09-16T16:58:46.139Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4468 |
vulnerable | 2026-06-08 04:51:48.596616 |
Details available
Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Published: 2009-12-30T19:00:00.000Z
Updated: 2024-08-07T07:01:20.426Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4467 |
vulnerable | 2026-06-08 04:51:48.596335 |
Details available
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action.
Published: 2009-12-30T19:00:00.000Z
Updated: 2024-08-07T07:01:20.479Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4466 |
vulnerable | 2026-06-08 04:51:48.596018 |
Details available
DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which reveals the installation path in an error message. NOTE: this issue might be resultant from improperly controlled computation in tools.php that leads to a denial of service (CPU or memory consumption).
Published: 2009-12-30T19:00:00.000Z
Updated: 2024-08-07T07:01:20.741Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4465 |
vulnerable | 2026-06-08 04:51:48.595649 |
Details available
DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and configuration information, log data, and gain administrative access via a direct request to scripts in (1) templates/ including (2) templates/deluxe/admincp/, (3) templates/corporate/admincp/, and (4) templates/blue/admincp/; (5) images/; (6) logs/ including (7) logs/cp.php; (8) wysiwyg/; (9) docs/; (10) classes/; (11) lang/; and (12) settings/.
Published: 2009-12-30T19:00:00.000Z
Updated: 2024-08-07T07:01:20.304Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.