CVE-2005-4256

ASP-DEV XM Forum RC3 - Cross-Site Scripting via forum_title Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-4256. PoCs published by Dj_Eyes.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in XM Forum due to improper input sanitization. It includes a sample exploit URL demonstrating the vulnerability but lacks executable code.

Description

Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forum_title parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In addition, its accuracy is in question because "forum_title" does not appear to be specified in the source code for XM Forum RC3. It is possible, but not certain, that this is CVE-2004-2211.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Dj_Eyes · textwebappsasp
https://www.exploit-db.com/exploits/26820

The provided text describes a cross-site scripting (XSS) vulnerability in XM Forum due to improper input sanitization. It includes a sample exploit URL demonstrating the vulnerability but lacks executable code.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: XM Forum (version unspecified)
No auth needed
Prerequisites: Access to the vulnerable forum application
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15858

Scores

EPSS 0.0139
EPSS Percentile 68.8%

Details

Status published
Products (1)
asp-dev/xm_forum rc3
Published Dec 15, 2005
Tracked Since Feb 18, 2026