Approved changes feed: RSS · Atom
cpe:2.3:a:deluxebb:deluxebb:1.09:*:*:*:*:*:*:*part: a version: 1.09 update: *
| Vendor | Deluxebb (9637c25c-dafa-5ca2-bcbb-ae263ef132f7) |
|---|---|
| Product | Deluxebb (4dfce013-cc33-5a5b-86cf-1ff00f58211d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-4151 |
vulnerable | 2026-06-08 04:55:19.014828 |
Details available
SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.
Published: 2010-11-03T19:00:00.000Z
Updated: 2024-08-07T03:34:37.349Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1859 |
vulnerable | 2026-06-08 04:54:10.787168 |
Details available
SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when adding a new thread.
Published: 2010-05-07T22:00:00.000Z
Updated: 2024-09-16T23:26:10.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1033 |
vulnerable | 2026-06-08 04:51:12.793995 |
Details available
SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the qorder parameter, a different vector than CVE-2005-2989 and CVE-2006-2503.
Published: 2009-03-20T18:00:00.000Z
Updated: 2024-08-07T04:57:17.504Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6146 |
vulnerable | 2026-06-08 04:50:54.352172 |
Details available
SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a delete##### parameter in a Delete action, a different vector than CVE-2005-2989.
Published: 2009-02-16T17:00:00.000Z
Updated: 2024-08-07T11:20:25.237Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6237 |
vulnerable | 2026-06-08 04:50:08.307082 |
Details available
cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during a profile update, which allows remote authenticated users to change the e-mail addresses of arbitrary accounts via a modified membercookie parameter, a different vector than CVE-2006-4078. NOTE: this can be leveraged for administrative access by requesting password-reset e-mail through a lostpw action to misc.php.
Published: 2007-12-04T18:00:00.000Z
Updated: 2024-08-07T16:02:34.831Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5154 |
vulnerable | 2026-06-08 04:49:19.793744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.