VULNERABILITY INTELLIGENCE

CVE-2006-4078

CVSS score7.5 HIGH
EPSS probability1.86%
CISA KEVNot currently listed
Published2006-08-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.

Primary references