high7.5Public exploit code
CVE-2002-0316
Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XMB Forum 1.6 pre-beta - Image Tag Script Injection2002-02-22 · webapps · php · Verified
Impact
Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xmb Software | Xmb Forum | Version 1.6_pre-beta |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=101447886404876&w=2
- http://www.iss.net/security_center/static/8262.php
- http://www.securityfocus.com/bid/4167
- https://docs.xmbforum2.com/index.php?title=Security_Issue_History
- http://marc.info/?l=bugtraq&m=101447886404876&w=2
- http://www.iss.net/security_center/static/8262.php
- http://www.securityfocus.com/bid/4167
- https://docs.xmbforum2.com/index.php?title=Security_Issue_History