CVE-2009-1033

DeluxeBB <= 1.3 - SQL Injection via qorder Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-1033. PoCs published by girex.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in DeluxeBB 1.3 and prior, allowing an attacker to retrieve all usernames and password hashes from the database without authentication. The vulnerability arises from improper handling of the 'order' parameter in misc.php, enabling arbitrary SQL queries.

Description

SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the qorder parameter, a different vector than CVE-2005-2989 and CVE-2006-2503.

Exploits (1)

exploitdb WORKING POC VERIFIED
by girex · textwebappsphp
https://www.exploit-db.com/exploits/8240

This exploit demonstrates a SQL injection vulnerability in DeluxeBB 1.3 and prior, allowing an attacker to retrieve all usernames and password hashes from the database without authentication. The vulnerability arises from improper handling of the 'order' parameter in misc.php, enabling arbitrary SQL queries.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: DeluxeBB 1.3 and prior
No auth needed
Prerequisites: Access to the target URL · SQL injection vulnerability in misc.php
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/8240
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34174
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49313
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/52788
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34365

Scores

EPSS 0.0102
EPSS Percentile 59.0%

Details

CWE
CWE-89
Status published
Products (9)
deluxebb/deluxebb
deluxebb/deluxebb 1.0
deluxebb/deluxebb 1.1
deluxebb/deluxebb 1.2
deluxebb/deluxebb 1.05
deluxebb/deluxebb 1.06
deluxebb/deluxebb 1.07
deluxebb/deluxebb 1.08
deluxebb/deluxebb 1.09
Published Mar 20, 2009
Tracked Since Feb 18, 2026