cve/2006/CVE-2006-4078.md
2024-06-18 02:51:15 +02:00

653 B

CVE-2006-4078

Description

pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.

POC

Reference

Github

No PoCs found on GitHub currently.