Th3 M0Ths

**Name of the Vulnerable Software and Affected Versions** DeluxeBB versions prior to 1.08 **Description** The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities are found in the `membercookie` cookie in `header.php` and the `redirect` parameter in `misc.php`. **Recommendations** For DeluxeBB versions prior to 1.08, update to version 1.08 or later to resolve the issue. As a temporary workaround, consider restricting access to the `header.php` and `misc.php` files to minimize the risk of exploitation. Avoid using the `membercookie` cookie and the `redirect` parameter in the affected API endpoints until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** DeluxeBB versions 1.07 and earlier **Description** The issue arises from improper handling of a username consisting of a single space character. This allows remote authenticated users to login as the "space" user, post as the guest user, and prevent an administrator from banning the "space" user. **Recommendations** For DeluxeBB versions 1.07 and earlier, update to a version that properly handles usernames to prevent exploitation.

**Name of the Vulnerable Software and Affected Versions** DeluxeBB versions 1.07 and earlier **Description** The issue allows remote attackers to bypass authentication, spoof users, and modify settings. This is achieved via the `memberpw` and `membercookie` cookies. **Recommendations** For DeluxeBB versions 1.07 and earlier, consider updating to a version that contains a fix for this issue, as using older versions poses a significant risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DeluxeBB versions 1.07 and earlier **Description** The issue allows remote attackers to overwrite certain variables, including ` GET`, ` POST`, ` ENV`, and ` SERVER`, via the ` COOKIE` variable. This can occur during an extract function call and may lead to security issues due to the "pollution of the global namespace." **Recommendations** For DeluxeBB versions 1.07 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DeluxeBB versions 1.07 and earlier **Description** The issue allows remote attackers to bypass SQL injection protection mechanisms. This can be achieved by using lowercase statements such as `union select` in the `login` variable and certain other variables, which do not match the uppercase `UNION SELECT` that the protection mechanisms are looking for. **Recommendations** For DeluxeBB versions 1.07 and earlier, as a temporary workaround, consider restricting the use of the `login` variable and other vulnerable variables in SQL queries until a patch is available. Avoid using the `union select` statement in affected API endpoints, such as "/api/v1/login", until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.