CVE-2006-3304
SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn parameter.
Date published : 2006-06-28
http://www.securityfocus.com/bid/18648
http://www.securityfocus.com/archive/1/438342/100/0/threaded