PT-2005-4445 · Xmb · Xmb

Published 2005-11-19 · Updated 2024-02-14 · CVE-2005-3689

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions XMB version 1.9.2

Description The issue allows remote attackers to obtain the installation path. This is achieved by providing an invalid fid parameter in a newthread action to the post.php file.

Recommendations For XMB version 1.9.2, consider restricting access to the post.php file or validating the fid parameter to prevent exploitation. As a temporary workaround, avoid using the newthread action with unvalidated input until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-3689

Affected Products

Xmb

References · 7

• 🔥 http://irannetjob.com/content/view/163/28 · Exploit
• http://secunia.com/advisories/17642 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3689 · Security Note
• http://securityfocus.com/bid/15489 · Note
• https://docs.xmbforum2.com/index.php?title=Security_Issue_History · Note
• http://vupen.com/english/advisories/2005/2488 · Note
• http://securityfocus.com/archive/1/417078/30/0/threaded · Note