CVEvulnerability
CVE-2004-1862
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-03-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) xmbuser parameter to xmb.php, (2) folder parameter to u2u.php, (3) viewmost, replymost, or latest parameter to stats.php, (4) message or icons parameter to post.php, (5) threadlist, pagelinks, forumlist, navigation, or (6) forumdisplay parameter to forumdisplay.php.
Affected configurations
• xmb forum xmb 1.8 sp3
• xmb forum xmb 1.9 beta
References
- http://marc.info/?l=bugtraq&m=108032355905265&w=2 marc.info
- http://osvdb.org/14983 osvdb.org
- http://osvdb.org/14985 osvdb.org
- http://osvdb.org/14986 osvdb.org
- http://osvdb.org/14987 osvdb.org
- http://osvdb.org/14988 osvdb.org
- http://secunia.com/advisories/11230 secunia.com
- http://www.securityfocus.com/bid/9983 Vendor Advisory
- https://docs.xmbforum2.com/index.php?title=Security_Issue_History docs.xmbforum2.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15654 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=108032355905265&w=2 marc.info
- http://osvdb.org/14983 osvdb.org
- http://osvdb.org/14985 osvdb.org
- http://osvdb.org/14986 osvdb.org
- http://osvdb.org/14987 osvdb.org
- http://osvdb.org/14988 osvdb.org
- http://secunia.com/advisories/11230 secunia.com
- http://www.securityfocus.com/bid/9983 Vendor Advisory
- https://docs.xmbforum2.com/index.php?title=Security_Issue_History docs.xmbforum2.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15654 exchange.xforce.ibmcloud.com