header-logo
Suggest Exploit
vendor:
XMB Forum
by:
SecurityFocus
8.8
CVSS
HIGH
Cross-Site Scripting, HTML Injection, SQL Injection
79, 89, 89
CWE
Product Name: XMB Forum
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2003

XMB Forum Multiple Vulnerabilities

XMB Forum is prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities due to insufficient sanitization of remote user supplied data. An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user or to have malicious SQL queries executed in the underlying database.

Mitigation:

Input validation should be used to ensure that user-supplied data is properly sanitized.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/9726/info
 
XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user or to have malicious SQL queries executed in the underlying database.

http://www.example.com/xmb18sp2/editprofile.php?user=x"><%73cript>alert(document.cookie);</%73cript>

Navigation

Suggest Exploit

Services By CQR