PT-2003-1657 · Xmb · Xmb Forum

Knight Commander · Publicado 2003-06-28 · Atualizado 2021-04-29 · CVE-2003-0483

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: XMB Forum version 1.8 Partagium

Description: The issue concerns cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to insert arbitrary script via specific parameters. The affected parameters include the member parameter to "member.php" and the action parameter to "buddy.php".

Recommendations: For XMB Forum version 1.8 Partagium, update the software to a version that includes a fix for the XSS vulnerabilities. As a temporary workaround, consider restricting access to the "member.php" and "buddy.php" files to minimize the risk of exploitation. Avoid using the member and action parameters in the affected API endpoints until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2003-0483

Produtos afetados

Xmb Forum

Referências · 4

• 🔥 https://exploit-db.com/exploits/22821 · Exploit
• https://docs.xmbforum2.com/index.php?title=Security_Issue_History · Nota
• http://marc.info/?l=bugtraq&m=105638720409307&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0483 · Nota de Segurança