xmb forum xmb vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page.

Xmb Forum Xmb 1.9 Beta Xmb Forum Xmb Xmb Forum Xmb 1.8 Sp1 Xmb Forum Xmb 1.9.1 Xmb Forum Xmb 1.8 Sp2 Xmb Forum Xmb 1.9.2 Xmb Forum Xmb 1.8 Sp3

7.5

CVSSv2

Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote malicious users to inject arbitrary SQL and gain privileges via the (1) ppp parameter in viewthread.php, (2) desc parameter in misc.php, (3) tpp parameter in forumdisplay.php, (4) ascdesc parameter in forumd...

Xmb Forum Xmb 1.8 Sp1 Xmb Forum Xmb 1.8 Sp2 Xmb Forum Xmb 1.8

1 EDB exploit

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in member.php of XMBforum XMB 1.8.x (aka Partagium) allows remote malicious users to insert arbitrary HTML and web script via the "member" parameter.

Xmb Forum Xmb 1.6 Xmb Forum Xmb 1.8 Xmb Forum Xmb 1.11

2 EDB exploits

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote malicious users to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseove...

Xmb Forum Xmb 1.8 Sp1 Xmb Forum Xmb 1.8 Sp2 Xmb Forum Xmb 1.8

3 EDB exploits

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote malicious users to inject arbitrary web script or HTML via (1) the u2uheader parameter in editprofile.php, the restrict parameter in (2) member.php, (3) m...

Xmb Forum Xmb 1.8 Sp3 Xmb Forum Xmb 1.9 Beta

5

CVSSv2

Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service (server disconnect) and possibly execute arbitrary code via a large filter on a column when using SmartView Tracker.

Xmb Forum Xmb 1.9 Beta Xmb Forum Xmb 1.8 Sp3

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote malicious users to inject arbitrary web script or HTML via the (1) xmbuser parameter to xmb.php, (2) folder parameter to u2u.php, (3) viewmost, replymost, or latest...

Xmb Forum Xmb 1.8 Sp3 Xmb Forum Xmb 1.9 Beta

5

CVSSv2

post.php in XMB 1.9.2 allows remote malicious users to obtain the installation path via an invalid fid parameter in a newthread action.

Xmb Forum Xmb 1.9.3 Xmb Forum Xmb 1.9.2

7.5

CVSSv2

SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote malicious users to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php.

Xmb Forum Xmb 1.8 Sp3 Xmb Forum Xmb 1.9 Beta

7.5

CVSSv2

Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) $u2u_select array parameter to u2u.inc.php and (2) $val variable (fidpw0 cookie value) in today.php.

Xmb Forum Xmb

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook