Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-106412. PoCs published by Vis Intelligendi.
AI-analyzed exploit summary This Perl script exploits an information disclosure vulnerability in DeluxeBB <= 1.3 by accessing private messages (PMs) without proper authentication. It interacts with the target's PM system to read, send, and list messages by leveraging insufficient session validation.
Description
DeluxeBB 1.3 - Private Information Disclosure
Exploits (1)
exploitdb
WORKING POC
by Vis Intelligendi · perlwebappsphp
https://www.exploit-db.com/exploits/15451
This Perl script exploits an information disclosure vulnerability in DeluxeBB <= 1.3 by accessing private messages (PMs) without proper authentication. It interacts with the target's PM system to read, send, and list messages by leveraging insufficient session validation.
Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target:
DeluxeBB <= 1.3
No auth needed
Prerequisites:
Target URL · Victim's username · Victim's user ID
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026