CVE-2005-3544

Xmb - XSS

Title source: rule
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter.

Exploits (2)

exploitdb WRITEUP VERIFIED
by GulfTech Security · textwebappsphp
https://www.exploit-db.com/exploits/27206
exploitdb WRITEUP VERIFIED
by HACKERS PAL · textwebappsphp
https://www.exploit-db.com/exploits/26477

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/22990
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15342
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2333
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/415800/30/0/threaded
Exploit, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17458

Scores

EPSS 0.0104
EPSS Percentile 77.6%

Details

Status published
Products (1)
xmb_forum/xmb 1.9.3
Published Nov 16, 2005
Tracked Since Feb 18, 2026