forums.xmbforum.com
http://forums.xmbforum.com/viewthread.php?tid=773046 CVE-2003-0375
XMB Forum 1.8 - 'member.php' Cross-Site Scripting
Record summary
CVE-2003-0375 has a selected CVSS score of 4.3; EIP currently links 2 catalogued exploits.
Description
Cross-site scripting (XSS) vulnerability in member.php of XMBforum XMB 1.8.x (aka Partagium) allows remote attackers to insert arbitrary HTML and web script via the "member" parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBXMB Forum 1.8 - 'member.php' Cross-Site ScriptingExploitDB exploitby Marc RuefNot analyzed1 file
ExploitDBXMB Forum 1.8 - 'member.php?member' Cross-Site ScriptingExploitDB exploitby Knight CommanderNot analyzed1 file
References
520030522 XMB 1.8 Partagium cross site scripting vulnerabilitymailing list
http://marc.info/?l=bugtraq&m=105363936402228&w=2 7662vdb entry
http://www.securityfocus.com/bid/7662 docs.xmbforum2.com
https://docs.xmbforum2.com/index.php?title=Security_Issue_History nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-0375