Unrated severityNVD Advisory· Published Aug 11, 2006· Updated Jun 16, 2026

CVE-2006-4078

Description

pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Deluxebb/Deluxebb2 versions
cpe:2.3:a:deluxebb:deluxebb:1.08:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:deluxebb:deluxebb:1.08:*:*:*:*:*:*:*
- (no CPE)range: <=1.08

Patches

Vulnerability mechanics

References

secunia.com/advisories/21387nvdPatchVendor Advisory
securityreason.com/securityalert/1381nvd
www.osvdb.org/27834nvd
www.securityfocus.com/archive/1/442464/100/0/threadednvd
www.securityfocus.com/bid/19418nvd
www.vupen.com/english/advisories/2006/3188nvd
exchange.xforce.ibmcloud.com/vulnerabilities/28270nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000