CVEvulnerability
CVE-2004-1863
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote attackers to inject arbitrary web script or HTML via (1) the u2uheader parameter in editprofile.php, the restrict parameter in (2) member.php, (3) misc.php, and (4) today.php, and (5) an arbitrary parameter in phpinfo.php.
Affected configurations
• xmb forum xmb 1.8 sp3
• xmb forum xmb 1.9 beta
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=108032355905265&w=2 marc.info
- http://www.osvdb.org/14982 www.osvdb.org
- http://www.osvdb.org/14989 www.osvdb.org
- http://www.osvdb.org/14991 www.osvdb.org
- http://www.osvdb.org/16884 www.osvdb.org
- http://www.securityfocus.com/bid/9983 www.securityfocus.com
- https://docs.xmbforum2.com/index.php?title=Security_Issue_History docs.xmbforum2.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15654 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=108032355905265&w=2 marc.info
- http://www.osvdb.org/14982 www.osvdb.org
- http://www.osvdb.org/14989 www.osvdb.org
- http://www.osvdb.org/14991 www.osvdb.org
- http://www.osvdb.org/16884 www.osvdb.org
- http://www.securityfocus.com/bid/9983 www.securityfocus.com
- https://docs.xmbforum2.com/index.php?title=Security_Issue_History docs.xmbforum2.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15654 exchange.xforce.ibmcloud.com