Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities

====================================================================== Secunia Research 14/06/2006 - DeluxeBB SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

CVE-2006-2914

CVE-2006-2914 concerns DeluxeBB 1.06 with a remote file inclusion flaw. Secunia and Secunia-derived documents describe an vulnerability where input passed to the templatefolder parameter in several scripts (deluxe/postreply.php, deluxe/posting.php, deluxe/pm/newpm.php and corresponding default/ v...