CVSS: 4.3EPSS: 1%CPEs: 3EXPL: 4CVE-2004-0322 – XMB Forum 1.8 - 'editprofile.php?user' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2004-0322
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover event in an align tag when bbcode is allowed, or (5) img tag where bbcode is allowed. • https://www.exploit-db.com/exploits/23746 https://www.exploit-db.com/exploits/23745 https://www.exploit-db.com/exploits/23747 http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html http://marc.info/?l=bugtraq&m=107756526625179&w=2 http://www.securityfocus.com/bid/9726 http://www.xmbforum.com/community/boards/viewthread.php?tid=746859 https://docs.xmbforum2.com/index.php?title=Security_Issue_History https://exchange.xforce.ibmcloud.com/vulnerabilities/15292 https://ex •
CVSS: 6.8EPSS: 1%CPEs: 1EXPL: 1CVE-2003-0483 – XMB Forum 1.8 - 'buddy.php?action' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2003-0483
Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php. Vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en XMB Forum 1.8 Partagium permite a atacantes remotos insertar script arbitrario mediante el parámetro member en member.php, o el parámetro action en buddy.php • https://www.exploit-db.com/exploits/22821 http://marc.info/?l=bugtraq&m=105638720409307&w=2 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 2CVE-2003-0375 – XMB Forum 1.8 - 'member.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2003-0375
Cross-site scripting (XSS) vulnerability in member.php of XMBforum XMB 1.8.x (aka Partagium) allows remote attackers to insert arbitrary HTML and web script via the "member" parameter. Vulnerabilidad de secuencias de comandos en sitios cruzados en member.php de XMBforum XMB 1.8.x (Partagium) permite que atacantes remotos inserten HTML arbitrario y script web mediante el parámetro "member". • https://www.exploit-db.com/exploits/22632 https://www.exploit-db.com/exploits/22820 http://forums.xmbforum.com/viewthread.php?tid=773046 http://marc.info/?l=bugtraq&m=105363936402228&w=2 http://www.securityfocus.com/bid/7662 https://docs.xmbforum2.com/index.php?title=Security_Issue_History •