Security Advisory
CVE-2006-3797
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies.