EUVD-2006-0785

Malware in sbrugna...

EUVD-2005-3543

Malware in sbrugna...

XMB Forum 1.8/1.9 u2u.php username Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16604/info XMB Forum is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Successful...

CVE-2006-0779

Cross-site scripting XSS vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag...

CVE-2006-0779

CVE-2006-0779 concerns a cross-site scripting (XSS) vulnerability in XMB Forums (u2u.php) affecting 1.9.3 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via the username parameter, demonstrated with a URL-encoded iframe tag. Affected component: u2u.php; vulnerabilit...

CVE-2005-3544

Cross-site scripting XSS vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2005-3544

** vuln: XMB 1.9.3** has an XSS in u2u.php that lets remote attackers inject arbitrary scripts via the username parameter. The vulnerability arises from insufficient input sanitization in the web interface, enabling script execution in the victim’s browser. No explicit exploit details, affected v...

CVE-2005-3544

Cross-site scripting XSS vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

xmbforums.txt

Hello This is Xss in the old versions and html injection in the new versions of xmb forums .. Discovered By : HACKERS PAL injected file u2u.php as the below u2u.php?action=send&username=|Html Injection OR XSS Thanks ,,...

XMB Forum 1.9.3 - u2u.php Cross-Site Scripting

XMB Forum 1.9.3 - u2u.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15342/info XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...