VULNERABILITY INTELLIGENCE

CVE-2009-4467

CVSS score4 NONE
EPSS probability1.66%
CISA KEVNot currently listed
Published2009-12-30
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:N

Description

misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references