4.3

CVE-2004-1862

Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) xmbuser parameter to xmb.php, (2) folder parameter to u2u.php, (3) viewmost, replymost, or latest parameter to stats.php, (4) message or icons parameter to post.php, (5) threadlist, pagelinks, forumlist, navigation, or (6) forumdisplay parameter to forumdisplay.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xmb Forum ≫ Xmb Version1.8_sp3
Xmb Forum ≫ Xmb Version1.9_beta
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.51% 0.827
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://docs.xmbforum2.com/index.php?title=Security_Issue_History
http://marc.info/?l=bugtraq&m=108032355905265&w=2
http://osvdb.org/14983
http://osvdb.org/14985
http://osvdb.org/14986
http://osvdb.org/14987
http://osvdb.org/14988
http://secunia.com/advisories/11230
http://www.securityfocus.com/bid/9983
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15654