CVE-2006-4078

Summary

pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/28270
• http://www.osvdb.org/27834
• http://securityreason.com/securityalert/1381
• http://www.securityfocus.com/archive/1/442464/100/0/threaded
• http://www.vupen.com/english/advisories/2006/3188
• http://secunia.com/advisories/21387
• http://www.securityfocus.com/bid/19418

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/28270
• http://www.osvdb.org/27834
• http://securityreason.com/securityalert/1381
• http://www.securityfocus.com/archive/1/442464/100/0/threaded
• http://www.vupen.com/english/advisories/2006/3188
• http://secunia.com/advisories/21387
• http://www.securityfocus.com/bid/19418

• ←Previous
• Next→