CVE-2006-4078

The CVE-2006-4078 entry concerns DeluxeBB 1.08 (and possibly earlier) where pm.php (the PM system) allows remote attackers to bypass authentication by supplying an arbitrary username in the membercookie cookie parameter. This is a logic/authorization flaw in the PM component that enables access w...

CVE-2005-4078

CVE-2005-4078 describes multiple cross-site scripting (XSS) flaws in Ideal BB.NET 1.3 and earlier. The vulnerabilities permit remote injection of arbitrary web script or HTML via parameters in topics.aspx (forumID, boardID, topicRepeater1-p), categoryindex.aspx (boardID), posts.aspx (postID), for...

CVE-2022-4078

...