EUVD-2006-2911

Malware in sbrugna...

PT-2006-5892 · Deluxebb · Deluxebb

Name of the Vulnerable Software and Affected Versions: DeluxeBB versions 1.09 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the templatefolder parameter. This can be exploited by providing a malicious URL to the vulnerable parameter,...

CVE-2006-5154: Undefined Security Weakness

PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatefolder parameter...

CVE-2006-2914: Undefined Security Weakness

PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder parameter to 1 postreply.php, 2 posting.php, 3 and pm/newpm.php in the deluxe/ directory, and 4 postreply.php, 5 posting.php, and 6 pm/newpm.php in the defaul...