CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2005-2575
https://notcve.org/view.php?id=CVE-2005-2575
SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable. • http://marc.info/?l=bugtraq&m=112361545228809&w=2 http://www.securityfocus.com/bid/14523 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2005-0885
https://notcve.org/view.php?id=CVE-2005-0885
Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields. • http://securitytracker.com/id?1013515 http://www.securityfocus.com/bid/12886 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •
CVSS: 5.0EPSS: 4%CPEs: 2EXPL: 0CVE-2004-1860
https://notcve.org/view.php?id=CVE-2004-1860
Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service (server disconnect) and possibly execute arbitrary code via a large filter on a column when using SmartView Tracker. • http://marc.info/?l=bugtraq&m=108023281112510&w=2 http://securitytracker.com/id?1009490 http://www.osvdb.org/4412 http://www.securityfocus.com/bid/9870 https://exchange.xforce.ibmcloud.com/vulnerabilities/15539 •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2004-1863
https://notcve.org/view.php?id=CVE-2004-1863
Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote attackers to inject arbitrary web script or HTML via (1) the u2uheader parameter in editprofile.php, the restrict parameter in (2) member.php, (3) misc.php, and (4) today.php, and (5) an arbitrary parameter in phpinfo.php. • http://marc.info/?l=bugtraq&m=108032355905265&w=2 http://www.osvdb.org/14982 http://www.osvdb.org/14989 http://www.osvdb.org/14991 http://www.osvdb.org/16884 http://www.securityfocus.com/bid/9983 https://docs.xmbforum2.com/index.php?title=Security_Issue_History https://exchange.xforce.ibmcloud.com/vulnerabilities/15654 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2004-1864
https://notcve.org/view.php?id=CVE-2004-1864
SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php. • http://marc.info/?l=bugtraq&m=108032355905265&w=2 http://securitytracker.com/id?1009561 http://www.osvdb.org/16886 http://www.securityfocus.com/bid/9983 https://docs.xmbforum2.com/index.php?title=Security_Issue_History https://exchange.xforce.ibmcloud.com/vulnerabilities/15655 •