PT-2003-1657 · Xmb · Xmb Forum

Knight Commander · Published 2003-06-28 · Updated 2021-04-29 · CVE-2003-0483

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: XMB Forum version 1.8 Partagium

Description: The issue concerns cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to insert arbitrary script via specific parameters. The affected parameters include the member parameter to "member.php" and the action parameter to "buddy.php".

Recommendations: For XMB Forum version 1.8 Partagium, update the software to a version that includes a fix for the XSS vulnerabilities. As a temporary workaround, consider restricting access to the "member.php" and "buddy.php" files to minimize the risk of exploitation. Avoid using the member and action parameters in the affected API endpoints until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2003-0483

Affected Products

Xmb Forum

References · 4

• 🔥 https://exploit-db.com/exploits/22821 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0483 · Security Note
• https://docs.xmbforum2.com/index.php?title=Security_Issue_History · Note
• http://marc.info/?l=bugtraq&m=105638720409307&w=2 · Note