CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3CVE-2005-3544 – XMB Forum 1.9.3 - 'u2u.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2005-3544
Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Vulnerabilidad de scripts en sitios cruzados (XSS) en u2u.php de XBM 1.9.3 permite a atacantes remotos inyectar sript web de su elección mediante el parámetro username. • https://www.exploit-db.com/exploits/26477 https://www.exploit-db.com/exploits/27206 http://secunia.com/advisories/17458 http://www.securityfocus.com/archive/1/415800/30/0/threaded http://www.securityfocus.com/bid/15342 http://www.vupen.com/english/advisories/2005/2333 https://docs.xmbforum2.com/index.php?title=Security_Issue_History https://exchange.xforce.ibmcloud.com/vulnerabilities/22990 •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2005-2574
https://notcve.org/view.php?id=CVE-2005-2574
xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as _SERVER[REMOTE_ADDR]. • http://forums.xmbforum.com/viewthread.php?tid=754523 http://marc.info/?l=bugtraq&m=112361545228809&w=2 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2005-2575
https://notcve.org/view.php?id=CVE-2005-2575
SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable. • http://marc.info/?l=bugtraq&m=112361545228809&w=2 http://www.securityfocus.com/bid/14523 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2005-0885
https://notcve.org/view.php?id=CVE-2005-0885
Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields. • http://securitytracker.com/id?1013515 http://www.securityfocus.com/bid/12886 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2004-1863
https://notcve.org/view.php?id=CVE-2004-1863
Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote attackers to inject arbitrary web script or HTML via (1) the u2uheader parameter in editprofile.php, the restrict parameter in (2) member.php, (3) misc.php, and (4) today.php, and (5) an arbitrary parameter in phpinfo.php. • http://marc.info/?l=bugtraq&m=108032355905265&w=2 http://www.osvdb.org/14982 http://www.osvdb.org/14989 http://www.osvdb.org/14991 http://www.osvdb.org/16884 http://www.securityfocus.com/bid/9983 https://docs.xmbforum2.com/index.php?title=Security_Issue_History https://exchange.xforce.ibmcloud.com/vulnerabilities/15654 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •