Vulnerabilities > CVE-2006-3798 - Remote Security vulnerability in Deluxebb 1.05/1.06/1.07
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
DeluxeBB 1.07 and earlier allows remote attackers to overwrite the (1) _GET, (2) _POST, (3) _ENV, and (4) _SERVER variables via the _COOKIE (aka COOKIE) variable, which can overwrite the other variables during an extract function call, probably leading to multiple security vulnerabilities, aka "pollution of the global namespace."
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |