Vulnerability in Deluxebb

CVE-2006-4080

DeluxeBB 1.08, and possibly earlier, uses cookies that include the MD5 hash of a password, which allows remote attackers to gain privileges by sniffing or cross-site scripting (XSS) and conduct password guessing attacks.

EPSS: 0.010 (58.3th percentile) — read the EPSS interpretation.

Affected products

  • Deluxebb — versions 1.0, 1.05, 1.06
  • N/a — versions n/a

References