| Package | Affected versions | Patched versions |
|---|---|---|
| deluxebb | = 1.08 |
pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free