Lucene search
HistoryAug 11, 2006 - 1:04 a.m.
CVE-2006-4078
cve-2006-4078
pm.php
deluxebb 1.08
authentication bypass
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.
Affected configurations
Node
deluxebbdeluxebbMatch1.08
| CPE | Name | Operator | Version |
|---|---|---|---|
| deluxebb:deluxebb | deluxebb | eq | 1.08 |
Related
nvd
nvd
CVE-2006-4078
2006-08-11 01:04:00
CVE-2007-6237
2007-12-04 18:46:00
cvelist
cvelist
CVE-2006-4078
2006-08-11 01:00:00
CVE-2007-6237
2007-12-04 18:00:00
cve
cve
CVE-2007-6237
2007-12-04 18:46:00
prion
prion
Design/Logic Flaw
2007-12-04 18:46:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
Related for CVE-2006-4078