XMB Cross-Site Scripting Vulnerability

XMB is a lightweight PHP forum software. XMB suffers from a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

XMB-1.9.3.txt

GulfTech Security Research February 12, 2006 Vendor : XMB Software URL : http://www.xmbforum.com/ Version : XMB Forums $val if pregmatch'^fidpw0-9+$', $key, $fetch $r2 = "fid='$fetch1' AND password='$val'"; if count$r2 0 $r = implode' OR ', $r2; $q = $db-query"SELECT fid FROM $tableforums WHERE...