GCVE - cpe:2.3:a:deluxebb:deluxebb:1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:deluxebb:deluxebb:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

Vendor	Deluxebb (`9637c25c-dafa-5ca2-bcbb-ae263ef132f7`)
Product	Deluxebb (`4dfce013-cc33-5a5b-86cf-1ff00f58211d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-4151`	vulnerable	2026-06-08 04:55:19.010783	Details available SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033. Published: 2010-11-03T19:00:00.000Z Updated: 2024-08-07T03:34:37.349Z Open on db.gcve.eu Reference links http://www.htbridge.ch/advisory/sql_injection_in_deluxebb.html http://secunia.com/advisories/41918 http://www.deluxebb.com/community/topic.php?tid=993 http://www.securityfocus.com/archive/1/514374/100/0/threaded http://www.securityfocus.com/bid/44259	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1859`	vulnerable	2026-06-08 04:54:10.783486	Details available SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when adding a new thread. Published: 2010-05-07T22:00:00.000Z Updated: 2024-09-16T23:26:10.216Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39962 http://php-security.org/2010/05/06/mops-2010-011-deluxebb-newthread-sql-injection-vulnerability/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1033`	vulnerable	2026-06-08 04:51:12.790653	Details available SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the qorder parameter, a different vector than CVE-2005-2989 and CVE-2006-2503. Published: 2009-03-20T18:00:00.000Z Updated: 2024-08-07T04:57:17.504Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/8240 http://www.securityfocus.com/bid/34174 https://exchange.xforce.ibmcloud.com/vulnerabilities/49313 http://osvdb.org/52788 http://secunia.com/advisories/34365	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6146`	vulnerable	2026-06-08 04:50:54.348774	Details available SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a delete##### parameter in a Delete action, a different vector than CVE-2005-2989. Published: 2009-02-16T17:00:00.000Z Updated: 2024-08-07T11:20:25.237Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/7593 http://www.securityfocus.com/bid/33037 http://secunia.com/advisories/33351	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0439`	vulnerable	2026-06-08 04:50:11.047984	Details available Cross-site scripting (XSS) vulnerability in templates/default/admincp/attachments_header.php in DeluxeBB 1.1 allows remote attackers to inject arbitrary web script or HTML via the lang_listofmatches parameter. Published: 2008-01-23T21:00:00.000Z Updated: 2024-08-07T07:46:54.413Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/27401 http://www.securityfocus.com/archive/1/486804/100/0/threaded http://securityreason.com/securityalert/3564 https://exchange.xforce.ibmcloud.com/vulnerabilities/39829	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

DeluxeBB 1.1

Notes

PURL mappings

Vulnerability references

Contribute