Vulnerabilities > CVE-2005-3544 - Unspecified vulnerability in XMB Forum XMB 1.9.3

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
xmb-forum
exploit available
NVD
Published: 2005-11-16
Updated: 2021-04-29

Summary

Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter.

Vulnerable Configurations

Part Description Count
Application
Xmb_Forum
1

Exploit-Db

  • descriptionXMB 1.9.3 U2U.PHP Cross-Site Scripting Vulnerability. CVE-2005-3544. Webapps exploit for php platform
    idEDB-ID:26477
    last seen2016-02-03
    modified2005-11-07
    published2005-11-07
    reporterHACKERS PAL
    sourcehttps://www.exploit-db.com/download/26477/
    titleXMB 1.9.3 U2U.PHP Cross-Site Scripting Vulnerability
  • descriptionXMB Forum 1.8/1.9 u2u.php username Parameter XSS. CVE-2005-3544. Webapps exploit for php platform
    idEDB-ID:27206
    last seen2016-02-03
    modified2006-02-13
    published2006-02-13
    reporterJames Bercegay
    sourcehttps://www.exploit-db.com/download/27206/
    titleXMB Forum 1.8/1.9 u2u.php username Parameter XSS

Statements

contributor
lastmodified2008-12-11
organizationXMB
statementXMB versions 1.9.8 and later were checked and are not vulnerable.

References