Unrated severityNVD Advisory· Published Jul 24, 2006· Updated Apr 16, 2026

CVE-2006-3797

Description

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies.

Affected products

Deluxebb/Deluxebb3 versions
cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*
- cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*
- cpe:2.3:a:deluxebb:deluxebb:1.07:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.htmlnvd
securityreason.com/securityalert/1254nvd
www.securityfocus.com/archive/1/440435/100/0/threadednvd
www.securityfocus.com/bid/19052nvd
exchange.xforce.ibmcloud.com/vulnerabilities/27835nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000