CVE-2006-4078

2006-08-10T21:04:00
ID CVE-2006-4078
Type cve
Reporter NVD
Modified 2018-10-17T17:33:15

Description

pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.