CVE-2006-2915

Description

Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex, (3) xthetimeoffset, and (4) xthetimeformat parameters during account registration.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27091

http://www.vupen.com/english/advisories/2006/2347

http://www.securityfocus.com/bid/18453

http://www.securityfocus.com/archive/1/438597/100/0/threaded

http://www.securityfocus.com/archive/1/437228/100/100/threaded

http://www.osvdb.org/26457

http://securitytracker.com/id?1016309

http://securityreason.com/securityalert/1134

http://secunia.com/secunia_research/2006-44/advisory

http://secunia.com/advisories/20152

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS