178 matches found
CVE-2005-3689
post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action...
CVE-2005-3688
The CVE-2005-3688 entry describes a cross-site scripting (XSS) vulnerability in XMB Forum up to version 1.9.3, in members.php, exploitable via the Your Current Mood field on the registration page. The vulnerability allows remote attackers to inject arbitrary script/HTML. A related PT-2005-4444 ad...
CVE-2005-3689
CVE-2005-3689 affects XMB Forum 1.9.2, specifically the post.php file. The vulnerability occurs when processing a newthread action with an invalid fid parameter, enabling remote attackers to disclose the installation path. This is evidenced by multiple connected documents citing: post.php in XMB ...
CVE-2005-3688
Cross-site scripting XSS vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page...
CVE-2005-3689
post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action...
[KAPDA::#13] - XMB HTML Injection & Path Disclosure.
KAPDA::13 - XMB extreme message board HTML Injection & Path Disclosure. KAPDA New advisory Vendor: http://www.xmbforum.com Bug: HTML Injection & Path Disclosure Exploitation: Remote with browser Description: -------------------- XMB is a free message board powered by PHP and MySQL. Vulnerability:...
CVE-2005-3544
** vuln: XMB 1.9.3** has an XSS in u2u.php that lets remote attackers inject arbitrary scripts via the username parameter. The vulnerability arises from insufficient input sanitization in the web interface, enabling script execution in the victim’s browser. No explicit exploit details, affected v...
xmbforums.txt
Hello This is Xss in the old versions and html injection in the new versions of xmb forums .. Discovered By : HACKERS PAL injected file u2u.php as the below u2u.php?action=send&username=|Html Injection OR XSS Thanks ,,...
[SA17458] XMB "username" Cross-Site Scripting Vulnerability
TITLE: XMB "username" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17458 VERIFY ADVISORY: http://secunia.com/advisories/17458/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: XMB 1.x http://secunia.com/product/1491/ DESCRIPTION: HACKERS PAL has...
XMB Forum 1.9.3 - u2u.php Cross-Site Scripting
XMB Forum 1.9.3 - u2u.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15342/info XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
Xss - Html injection in XMB
Hello This is Xss in the old versions and html injection in the new versions of xmb forums .. Discovered By : HACKERS PAL injected file u2u.php as the below u2u.php?action=send&username=|Html Injection OR XSS Thanks ,,...
XMB Forum 1.9.3 - 'u2u.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15342/info XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
XMB Forum < 1.9.8 SP2 SQL Injection
Binary data 3276.prm...
XMB Forum 1.9.3 - post.php SQL Injection
XMB Forum 1.9.3 - post.php SQL Injection source: https://www.securityfocus.com/bid/15267/info XMB Nexus Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
XMB Forum 1.9.3 - 'post.php' SQL Injection
source: https://www.securityfocus.com/bid/15267/info XMB Nexus Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
CVE-2005-2575
SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable...
CVE-2005-2574
The CVE-2005-2574 entry concerns XMB Forum 1.9.1 where the file xmb.php “extracts and defines all provided variables,” allowing a remote attacker to modify arbitrary server variables such as _SERVER[REMOTE_ADDR] . This is a direct impact on server environment data due to improper input handling. ...
CVE-2005-2575
CVE-2005-2575: XMB Forum 1.9.1 contains a SQL injection in u2u.inc.php that allows remote attackers to inject arbitrary SQL via values inserted into the $in variable. This is a web application vulnerability affecting XMB Forum’s PHP code as described in the CVE entry and related records. The prov...