PT-2005-1913 · Xmb · Xmb Forum

Published 2005-03-26 · Updated 2021-04-29 · CVE-2005-0885

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions XMB Forum version 1.9.1

Description The issue allows remote attackers to inject arbitrary web script or HTML via the Mood or Send To fields, potentially leading to cross-site scripting (XSS) attacks.

Recommendations For XMB Forum version 1.9.1, update to a version that addresses the XSS vulnerabilities in the Mood and Send To fields.

Fix

Related Identifiers

CVE-2005-0885

Affected Products

Xmb Forum

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-0885 · Security Note
• https://docs.xmbforum2.com/index.php?title=Security_Issue_History · Note
• http://securityfocus.com/bid/12886 · Note
• http://securitytracker.com/id?1013515 · Note