CVE

Id
8750  
CVE No.
CVE-2004-0322  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover event in an align tag when bbcode is allowed, or (5) img tag where bbcode is allowed.  
Phase
Modified (20050718)  
Votes
ACCEPT(1) Armstrong | NOOP(3) Cole, Cox, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
55148 8750 CVE-2004-0322 BUGTRAQ:20040223 [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2  View
55149 8750 CVE-2004-0322 URL:http://marc.info/?l=bugtraq&m=107756526625179&w=2  View
55150 8750 CVE-2004-0322 BUGTRAQ:20040225 Re: [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2  View
55151 8750 CVE-2004-0322 URL:http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html  View
55152 8750 CVE-2004-0322 CONFIRM:http://www.xmbforum.com/community/boards/viewthread.php?tid=746859  View
55153 8750 CVE-2004-0322 BID:9726  View
55154 8750 CVE-2004-0322 URL:http://www.securityfocus.com/bid/9726  View
55155 8750 CVE-2004-0322 XF:xmb-multiple-scripts-xss(15292)  View
55156 8750 CVE-2004-0322 URL:http://xforce.iss.net/xforce/xfdb/15292  View
55157 8750 CVE-2004-0322 XF:xmb-bbcode-execute-code(15294)  View

Related JVN