Security Advisory
CVE-2006-3799
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
DeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms via the login variable and certain other variables, by using lowercase "union select" or possibly other statements that do not match the uppercase "UNION SELECT."