CVE-2006-3799 | BDVDB-2026-18285 Detail

Description#

DeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms via the login variable and certain other variables, by using lowercase "union select" or possibly other statements that do not match the uppercase "UNION SELECT."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/1254
http://www.securityfocus.com/bid/19052
http://secunia.com/advisories/21116
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html
http://www.vupen.com/english/advisories/2006/2879
http://www.securityfocus.com/archive/1/440435/100/0/threaded

Exploit#

No public exploit known

History#

Version 12006-07-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.