EUVD-2006-3789

Malware in sbrugna...

EUVD-2007-6205

Malware in sbrugna...

EUVD-2010-1879

Malware in sbrugna...

CVE-2010-1859

SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when adding a new thread...

CVE-2010-1859

DeluxeBB

CVE-2010-1859: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when adding a new thread...

CVE-2007-6237

cp.php in DeluxeBB 1.09 fails to verify that the membercookie matches the authenticated member during profile updates, enabling remote authenticated users to change e-mails for arbitrary accounts via a modified membercookie parameter (a different vector than CVE-2006-4078). This can be leveraged ...

CVE-2006-4078: Undefined Security Weakness

pm.php aka the PM system in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter...

CVE-2006-3797

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the 1 memberpw and 2 membercookie cookies...

CVE-2006-3797: Undefined Security Weakness

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the 1 memberpw and 2 membercookie cookies...

CVE-2006-3795: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in DeluxeBB before 1.08 allow remote attackers to inject arbitrary web script or HTML via the 1 membercookie cookie in header.php and the 2 redirect parameter in misc.php...