DeluxeBB 1.08, and possibly earlier, uses cookies that include the MD5 hash of a password, which allows remote attackers to gain privileges by sniffing or cross-site scripting (XSS) and conduct password guessing attacks.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Deluxebb | Deluxebb | * | 1.08 (including) |
| Deluxebb | Deluxebb | 1.0 (including) | 1.0 (including) |
| Deluxebb | Deluxebb | 1.05 (including) | 1.05 (including) |
| Deluxebb | Deluxebb | 1.06 (including) | 1.06 (including) |
| Deluxebb | Deluxebb | 1.07 (including) | 1.07 (including) |