CVEvulnerability

CVE-2004-0322

4.3 MEDIUM Published 2004-02-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-02-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover event in an align tag when bbcode is allowed, or (5) img tag where bbcode is allowed.

Affected configurations

• xmb forum xmb 1.8 • xmb forum xmb 1.8 sp1 • xmb forum xmb 1.8 sp2

References