CVE-2004-0323
XMB Forum 1.8 - 'forumdisplay.php' Multiple SQL Injections
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in viewthread.php, (2) desc parameter in misc.php, (3) tpp parameter in forumdisplay.php, (4) ascdesc parameter in forumdisplay.php, or (5) the addon parameter in stats.php. NOTE: it has also been shown that item (3) is also in XMB 1.9 beta.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2004-02-23 First Exploit
- 2004-03-17 CVE Reserved
- 2004-03-18 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html | Mailing List | |
| http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html | Mailing List | |
| http://marc.info/?l=bugtraq&m=107756526625179&w=2 | Mailing List | |
| http://www.xmbforum.com/community/boards/viewthread.php?tid=746859 | X_refsource_confirm | |
| https://docs.xmbforum2.com/index.php?title=Security_Issue_History | X_refsource_misc | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15295 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/23748 | 2004-02-23 | |
| http://www.securityfocus.com/bid/9726 | 2024-08-08 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Xmb Forum Search vendor "Xmb Forum" | Xmb Search vendor "Xmb Forum" for product "Xmb" | 1.8 Search vendor "Xmb Forum" for product "Xmb" and version "1.8" | - |
Affected
| ||||||
| Xmb Forum Search vendor "Xmb Forum" | Xmb Search vendor "Xmb Forum" for product "Xmb" | 1.8_sp1 Search vendor "Xmb Forum" for product "Xmb" and version "1.8_sp1" | - |
Affected
| ||||||
| Xmb Forum Search vendor "Xmb Forum" | Xmb Search vendor "Xmb Forum" for product "Xmb" | 1.8_sp2 Search vendor "Xmb Forum" for product "Xmb" and version "1.8_sp2" | - |
Affected
| ||||||