Page 2 of 18 results (0.030 seconds)

CVSS: 4.3EPSS: 0%CPEs: 7EXPL: 1

CVE-2005-3688

https://notcve.org/view.php?id=CVE-2005-3688

Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page. • http://irannetjob.com/content/view/163/28 http://secunia.com/advisories/17642 http://securitytracker.com/id?1015237 http://www.securityfocus.com/archive/1/417078/30/0/threaded http://www.securityfocus.com/bid/15489 http://www.vupen.com/english/advisories/2005/2488 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3

CVE-2005-3544 – XMB Forum 1.9.3 - 'u2u.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2005-3544

Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Vulnerabilidad de scripts en sitios cruzados (XSS) en u2u.php de XBM 1.9.3 permite a atacantes remotos inyectar sript web de su elección mediante el parámetro username. • https://www.exploit-db.com/exploits/26477 https://www.exploit-db.com/exploits/27206 http://secunia.com/advisories/17458 http://www.securityfocus.com/archive/1/415800/30/0/threaded http://www.securityfocus.com/bid/15342 http://www.vupen.com/english/advisories/2005/2333 https://docs.xmbforum2.com/index.php?title=Security_Issue_History https://exchange.xforce.ibmcloud.com/vulnerabilities/22990 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-2574

https://notcve.org/view.php?id=CVE-2005-2574

xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as _SERVER[REMOTE_ADDR]. • http://forums.xmbforum.com/viewthread.php?tid=754523 http://marc.info/?l=bugtraq&m=112361545228809&w=2 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-2575

https://notcve.org/view.php?id=CVE-2005-2575

SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable. • http://marc.info/?l=bugtraq&m=112361545228809&w=2 http://www.securityfocus.com/bid/14523 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-0885

https://notcve.org/view.php?id=CVE-2005-0885

Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields. • http://securitytracker.com/id?1013515 http://www.securityfocus.com/bid/12886 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •