CVE-2010-4151

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.

• CWE-89

• http://packetstormsecurity.org/1010-exploits/deluxebb13x-sql.txtExploit
• http://secunia.com/advisories/41918Vendor Advisory
• http://www.deluxebb.com/community/topic.php?tid=993Patch, URL Repurposed
• http://www.htbridge.ch/advisory/sql_injection_in_deluxebb.htmlExploit
• http://www.securityfocus.com/archive/1/514374/100/0/threaded
• http://www.securityfocus.com/bid/44259
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62660
• http://packetstormsecurity.org/1010-exploits/deluxebb13x-sql.txtExploit
• http://secunia.com/advisories/41918Vendor Advisory
• http://www.deluxebb.com/community/topic.php?tid=993Patch, URL Repurposed
• http://www.htbridge.ch/advisory/sql_injection_in_deluxebb.htmlExploit
• http://www.securityfocus.com/archive/1/514374/100/0/threaded
• http://www.securityfocus.com/bid/44259
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62660

Published

Nov 3, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4145Kisisel Radyo Script stores sensitive information under the …
• CVE-2010-4146Cross-site scripting (XSS) vulnerability in Attachmate Refle…
• CVE-2010-4147Multiple SQL injection vulnerabilities in Pentasoft Avactis …
• CVE-2010-4148Directory traversal vulnerability in AnyConnect 1.2.3.0, and…
• CVE-2010-4149Directory traversal vulnerability in FreshWebMaster Fresh FT…
• CVE-2010-4150Double free vulnerability in the imap_do_open function in th…
• CVE-2010-4152SQL injection vulnerability in catalog/index.shtml in 4site …
• CVE-2010-4153Directory traversal vulnerability in CrossFTP Pro 1.65a, and…
• CVE-2010-4154Directory traversal vulnerability in Rhino Software, Inc. FT…
• CVE-2010-4155Multiple cross-site scripting (XSS) vulnerabilities in eXV2 …
• CVE-2010-4156The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.…
• CVE-2010-4157Integer overflow in the ioc_general function in drivers/scsi…