CVE-2002-0316 - Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote att

CVE-2002-0316

Summary

Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag.

References

http://www.securityfocus.com/bid/4167
http://www.iss.net/security_center/static/8262.php
http://marc.info/?l=bugtraq&m=101447886404876&w=2
https://docs.xmbforum2.com/index.php?title=Security_Issue_History

Vulnerable Configurations

cpe:2.3:a:xmb_software:xmb_forum:1.6_pre-beta:*:*:*:*:*:*:*
cpe:2.3:a:xmb_software:xmb_forum:1.6_pre-beta:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 29-04-2021 - 15:15)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	4167
bugtraq	20020222 XMB cross-scripting vulnerability
xf	xmb-php-css(8262)

statements via4

contributor
lastmodified	2008-12-11
organization	XMB
statement	XMB versions 1.9.8 and later were checked and are not vulnerable.

Last major update

29-04-2021 - 15:15

Published

25-06-2002 - 04:00

Last modified

29-04-2021 - 15:15