CVE-2006-4078
deluxebb deluxebb: no CVSS score yet. EPSS 1.9% chance of exploitation in the next 30 days.
pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- deluxebb:deluxebb