CVE Vulnerabilities

CVE-2006-3799

Published: Jul 24, 2006 | Modified: Oct 17, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

DeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms via the login variable and certain other variables, by using lowercase union select or possibly other statements that do not match the uppercase UNION SELECT.

Affected Software

Name Vendor Start Version End Version
Deluxebb Deluxebb 1.05 1.05
Deluxebb Deluxebb 1.07 1.07
Deluxebb Deluxebb 1.06 1.06

References