CVE-2008-2194

Deluxebb < 1.1 - SQL Injection

Title source: rule

Description

SQL injection vulnerability in forums.php in DeluxeBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by EgiX · phpwebappsphp

https://www.exploit-db.com/exploits/5550

View Code ZIP pw:eip

References (4)

[Vendor Advisory] http://secunia.com/advisories/30084

[Exploit] http://www.securityfocus.com/bid/29062

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/42224

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5550

Scores

EPSS 0.0054

EPSS Percentile 67.7%

Details

CWE

CWE-89

Status published

Products (1)

deluxebb/deluxebb < 1.1

Published May 14, 2008

Tracked Since Feb 18, 2026