CVE Vulnerabilities

CVE-2006-3799

Published: Jul 24, 2006 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

DeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms via the login variable and certain other variables, by using lowercase union select or possibly other statements that do not match the uppercase UNION SELECT.

Affected Software

Name Vendor Start Version End Version
Deluxebb Deluxebb 1.05 (including) 1.05 (including)
Deluxebb Deluxebb 1.06 (including) 1.06 (including)
Deluxebb Deluxebb 1.07 (including) 1.07 (including)

References