Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2006-06-29	CVE-2006-3303	Cross-Site Scripting vulnerability in DeluxeBB Multiple cross-site scripting (XSS) vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) to parameters. network deluxebb	4.3
2006-06-23	CVE-2006-2915	SQL Injection vulnerability in Deluxebb 1.06 Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex, (3) xthetimeoffset, and (4) xthetimeformat parameters during account registration. network high complexity deluxebb	5.1
2006-06-23	CVE-2006-2914	Remote File Include vulnerability in Deluxebb 1.06 PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder parameter to (1) postreply.php, (2) posting.php, (3) and pm/newpm.php in the deluxe/ directory, and (4) postreply.php, (5) posting.php, and (6) pm/newpm.php in the default/ directory. network high complexity deluxebb	5.1