Xmb Forum

Xmb

17 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2004-1860

  • EPSS 2.28%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service (server disconnect) and possibly execute arbitrary code via a large filter on a column when using SmartView ...

7.5

CVE-2004-0323

Exploit
  • EPSS 0.84%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in viewthread.php, (2) desc parameter in misc.php, (3) tpp parameter in forumdisplay.php, (4) asc...

7.5

CVE-2004-1864

  • EPSS 1.24%
  • Published 26.03.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php.

4.3

CVE-2004-1862

  • EPSS 1.56%
  • Published 26.03.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) xmbuser parameter to xmb.php, (2) folder parameter to u2u.php, (3) viewmo...

4.3

CVE-2004-0322

Exploit
  • EPSS 1.24%
  • Published 23.02.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofil...

6.8

CVE-2003-0483

  • EPSS 0.49%
  • Published 07.08.2003 04:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php.

4.3

CVE-2003-0375

  • EPSS 0.57%
  • Published 16.06.2003 04:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in member.php of XMBforum XMB 1.8.x (aka Partagium) allows remote attackers to insert arbitrary HTML and web script via the "member" parameter.