CVE-2006-4078

Description

pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/28270

http://www.vupen.com/english/advisories/2006/3188

http://www.securityfocus.com/bid/19418

http://www.securityfocus.com/archive/1/442464/100/0/threaded

http://www.osvdb.org/27834

http://securityreason.com/securityalert/1381

http://secunia.com/advisories/21387

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS