CVE-2006-2915

DeluxeBB 1.06 has confirmed SQL injection vulnerabilities (CVE-2006-2915) via the register-time parameters hideemail, languagex, xthetimeoffset, and xthetimeformat. Secunia Research notes these inputs are not properly sanitised before being used in SQL queries, enabling remote manipulation of the...

CVE-2005-2915

The CVE-2005-2915 entry involves the Linksys WRT54G router (various 3.x releases) using a weak XOR-based encoding with a fixed mask for configuration data. This flaw could let an attacker decrypt configuration information and, in conjunction with CVE-2005-2914, potentially re-encrypt it. Connecte...