CVE-2006-3797: Deluxebb

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies.

Affected products

• Deluxebb Deluxebb: version 1.05 only; version 1.06 only; version 1.07 only

Published 2006-07-24. Last modified 2026-06-16.