Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 26/03/2004 Updated: 29/04/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote malicious users to inject arbitrary web script or HTML via the (1) xmbuser parameter to xmb.php, (2) folder parameter to u2u.php, (3) viewmost, replymost, or latest parameter to stats.php, (4) message or icons parameter to post.php, (5) threadlist, pagelinks, forumlist, navigation, or (6) forumdisplay parameter to forumdisplay.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xmb forum xmb 1.8_sp3
xmb forum xmb 1.9_beta

NVD-CWE-Other http://www.securityfocus.com/bid/9983 http://osvdb.org/14983 http://osvdb.org/14985 http://osvdb.org/14986 http://osvdb.org/14987 http://osvdb.org/14988 http://secunia.com/advisories/11230 http://marc.info/?l=bugtraq&m=108032355905265&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/15654 https://docs.xmbforum2.com/index.php?title=Security_Issue_History https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-1862

Vulnerability Summary

References

Vulmon Search

About

Products

Connect