CVE Database
/

CVE-2006-4080

Back to search

CVE-2006-4080

Published: Aug 11, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

DeluxeBB 1.08, and possibly earlier, uses cookies that include the MD5 hash of a password, which allows remote attackers to gain privileges by sniffing or cross-site scripting (XSS) and conduct password guessing attacks.

VendorProductVersions

n/a

n/a

affected
n/a

References

1381
third-party-advisory
x_refsource_SREASON
20060807 DeluxeBB Multiple Vulnerabilities
mailing-list
x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now