CVE-2006-5154: Deluxebb

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatefolder parameter.

Affected products

• Deluxebb Deluxebb: version 1.0 only; version 1.05 only; version 1.06 only; version 1.07 only; version 1.08 only; version 1.09 only

Published 2006-10-05. Last modified 2026-06-16.