Sploitus

10 exploited vulnerabilities in Xmb

Vulnerabilities with publicly known exploits

Vendors
Xmb, Xmb Forum, Extreme Message Board, Apache
With known exploits
10
Affected Xmb Software Xmb Forum versions
≤ 1.9.6_alpha, 1.6_pre-beta
Affected Xmb Forum Xmb versions
= 1.8, 1.8_sp1, 1.8_sp2, 1.9.2, 1.9.3, 1.5, 1.8_sp3, 1.9.1, 1.9_beta, 1.6, 1.11
Affected Xmb Software Extreme Message Board versions
≤ 1.9.6

Vulnerabilities with exploits

Highest CVSS first — 7 of these already have exploit code on Sploitus

CVE-2006-3994 1 exploit
CVSS 7.5 HIGH 2006-08-05FIX AVAILABLE
XMB 1.9.6 - 'mq=off' 'u2uid' SQL Injection
CVE-2004-0323 1 exploit
CVSS 7.5 HIGH 2004-03-18FIX AVAILABLE
XMB Forum 1.8 - 'forumdisplay.php' Multiple SQL Injections
CVE-2002-0316 1 exploit
CVSS 7.5 HIGH 2002-05-03FIX AVAILABLE
XMB Forum 1.6 pre-beta - Image Tag Script Injection
CVE-2006-4191 1 exploit
CVSS 5.1 MEDIUM 2006-08-17
XMB 1.9.6 Final - 'basename()' Remote Command Execution
CVE-2005-3689
CVSS 5.0 MEDIUM 2005-11-19FIX AVAILABLE
CVE-2007-6728
CVSS 4.3 MEDIUM 2009-07-05FIX AVAILABLE
CVE-2005-3688
CVSS 4.3 MEDIUM 2005-11-19
CVE-2005-3544 2 exploits
CVSS 4.3 MEDIUM 2005-11-16FIX AVAILABLE
XMB Forum 1.8/1.9 - 'u2u.php?Username' Cross-Site ScriptingXMB Forum 1.9.3 - 'u2u.php' Cross-Site Scripting
CVE-2004-0322 3 exploits
CVSS 4.3 MEDIUM 2004-02-23FIX AVAILABLE
XMB Forum 1.8 - 'u2uadmin.php?uid' Cross-Site ScriptingXMB Forum 1.8 - 'editprofile.php?user' Cross-Site Scripting
CVE-2003-0375 2 exploits
CVSS 4.3 MEDIUM 2003-06-06FIX AVAILABLE
XMB Forum 1.8 - 'member.php?member' Cross-Site ScriptingXMB Forum 1.8 - 'member.php' Cross-Site Scripting