VulnerabilityModified
CVE-2006-2915
Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex, (3) xthetimeoffset, and (4) xthetimeformat parameters during account registration.
MEDIUM 5.1EPSS 1.59%
Does this matter?
Lower severity and a low EPSS score (1.59%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex, (3) xthetimeoffset, and (4) xthetimeformat parameters during account registration.
- CVSS 2.0
- 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 1.59% probability · 74th percentile
- CISA KEV
- Not listed
- Affected
- deluxebb/deluxebb
- Source
- PSIRT-CNA@flexerasoftware.com
References
- http://secunia.com/advisories/20152Vendor Advisory
- http://secunia.com/secunia_research/2006-44/advisoryVendor Advisory
- http://securityreason.com/securityalert/1134
- http://securitytracker.com/id?1016309
- http://www.osvdb.org/26457
- http://www.securityfocus.com/archive/1/437228/100/100/threaded
- http://www.securityfocus.com/archive/1/438597/100/0/threaded
- http://www.securityfocus.com/bid/18453
- http://www.vupen.com/english/advisories/2006/2347
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27091
- http://secunia.com/advisories/20152Vendor Advisory
- http://secunia.com/secunia_research/2006-44/advisoryVendor Advisory
- http://securityreason.com/securityalert/1134
- http://securitytracker.com/id?1016309
- http://www.osvdb.org/26457
- http://www.securityfocus.com/archive/1/437228/100/100/threaded
- http://www.securityfocus.com/archive/1/438597/100/0/threaded
- http://www.securityfocus.com/bid/18453
- http://www.vupen.com/english/advisories/2006/2347
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27091
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.