Approved changes feed: RSS · Atom

cpe:2.3:a:deluxebb:deluxebb:1.08:*:*:*:*:*:*:*

part: a version: 1.08 update: *

VendorDeluxebb (9637c25c-dafa-5ca2-bcbb-ae263ef132f7)
ProductDeluxebb (4dfce013-cc33-5a5b-86cf-1ff00f58211d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4151 vulnerable 2026-06-08 04:55:19.013952 Details available
SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.
Published: 2010-11-03T19:00:00.000Z
Updated: 2024-08-07T03:34:37.349Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1859 vulnerable 2026-06-08 04:54:10.786579 Details available
SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when adding a new thread.
Published: 2010-05-07T22:00:00.000Z
Updated: 2024-09-16T23:26:10.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1033 vulnerable 2026-06-08 04:51:12.793465 Details available
SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the qorder parameter, a different vector than CVE-2005-2989 and CVE-2006-2503.
Published: 2009-03-20T18:00:00.000Z
Updated: 2024-08-07T04:57:17.504Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6146 vulnerable 2026-06-08 04:50:54.351353 Details available
SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a delete##### parameter in a Delete action, a different vector than CVE-2005-2989.
Published: 2009-02-16T17:00:00.000Z
Updated: 2024-08-07T11:20:25.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5154 vulnerable 2026-06-08 04:49:19.792997 Details available
PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatefolder parameter.
Published: 2006-10-03T23:00:00.000Z
Updated: 2024-08-07T19:41:04.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4078 vulnerable 2026-06-08 04:49:10.910904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.