CVE:CVE-2006-3797
CNNVD:CNNVD-200607-378
DeluxeBB 1.07及之前版本存在SQL注入漏洞。远程攻击者可以借助 (1) memberpw和(2) membercookie cookies，绕过认证，欺骗用户并修改设置。
solution:Upgrade deluxebb deluxebb to a higher version than 1.05,1.06,1.07,and avoid the version 1.05,1.06,1.07