CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3CVE-2005-3544 – XMB Forum 1.9.3 - 'u2u.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2005-3544
Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Vulnerabilidad de scripts en sitios cruzados (XSS) en u2u.php de XBM 1.9.3 permite a atacantes remotos inyectar sript web de su elección mediante el parámetro username. • https://www.exploit-db.com/exploits/26477 https://www.exploit-db.com/exploits/27206 http://secunia.com/advisories/17458 http://www.securityfocus.com/archive/1/415800/30/0/threaded http://www.securityfocus.com/bid/15342 http://www.vupen.com/english/advisories/2005/2333 https://docs.xmbforum2.com/index.php?title=Security_Issue_History https://exchange.xforce.ibmcloud.com/vulnerabilities/22990 •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2005-2574
https://notcve.org/view.php?id=CVE-2005-2574
xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as _SERVER[REMOTE_ADDR]. • http://forums.xmbforum.com/viewthread.php?tid=754523 http://marc.info/?l=bugtraq&m=112361545228809&w=2 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2005-2575
https://notcve.org/view.php?id=CVE-2005-2575
SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable. • http://marc.info/?l=bugtraq&m=112361545228809&w=2 http://www.securityfocus.com/bid/14523 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2005-0885
https://notcve.org/view.php?id=CVE-2005-0885
Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields. • http://securitytracker.com/id?1013515 http://www.securityfocus.com/bid/12886 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •
CVSS: 5.0EPSS: 4%CPEs: 2EXPL: 0CVE-2004-1860
https://notcve.org/view.php?id=CVE-2004-1860
Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service (server disconnect) and possibly execute arbitrary code via a large filter on a column when using SmartView Tracker. • http://marc.info/?l=bugtraq&m=108023281112510&w=2 http://securitytracker.com/id?1009490 http://www.osvdb.org/4412 http://www.securityfocus.com/bid/9870 https://exchange.xforce.ibmcloud.com/vulnerabilities/15539 •