Description
Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag.
Exploits (1)
References (4)
Core 4
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=101447886404876&w=2
Third Party Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/8262.php
Exploit, Patch, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/4167
Various Sources x_refsource_misc
https://docs.xmbforum2.com/index.php?title=Security_Issue_History
Scores
EPSS
0.0457
EPSS Percentile
89.3%
Details
Status
published
Products (1)
xmb_software/xmb_forum
1.6_pre-beta
Published
Jun 25, 2002
Tracked Since
Feb 18, 2026