• info
• discussion
• exploit
• solution
• references

DeluxeBB Multiple SQL Injection Vulnerabilities

No exploit is required.

Examples have been provided:

http://www.example.com/topic.php?tid=[code]
http://www.example.com/misc.php?sub=profile&uid=[code]
http://www.example.com/forums.php?fid=[code]
http://www.example.com/pm.php?sub=newpm&uid=[code]
http://www.example.com/newpost.php?sub=newthread&fid=[code]