EUVD-2008-6116

Malware in sbrugna...

CVE-2008-6146

SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via a delete parameter in a Delete action, a different vector than CVE-2005-2989...

DeluxeBB 1.2 Remote Blind SQL Injection

!/usr/bin/perl -------------------------------------------------- DeluxeBB 5; if @ARGV != 5 print "\n+----------------------------------------------------+\r", "\n| DeluxeBB defaultheader'Cookie' = cookies$...

Code injection

Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrators to inject arbitrary PHP code into logs/cp.php via the URI...

CVE-2008-2194

CVE-2008-2194 describes an SQL injection vulnerability in forums.php of DeluxeBB 1.2 and earlier. The issue is exploitable via the sort parameter and allows remote attackers to execute arbitrary SQL commands. The vulnerable component is the forums.php handling within DeluxeBB, and the root cause ...