CVE-2005-3688 - Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attac

CVE-2005-3688

Summary

Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page.

References

Vulnerable Configurations

cpe:2.3:a:xmb_forum:xmb:1.9_beta:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.9_beta:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:*:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:*:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.8_sp1:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.8_sp1:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.9.1:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.9.1:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.8_sp2:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.8_sp2:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.9.2:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.9.2:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 14-02-2024 - 01:17)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	15489
bugtraq	20051117 [KAPDA::#13] - XMB HTML Injection & Path Disclosure.
misc	http://irannetjob.com/content/view/163/28/
sectrack	1015237
secunia	17642
vupen	ADV-2005-2488

statements via4

contributor
lastmodified	2008-12-11
organization	XMB
statement	This CVE is considered invalid because it duplicates CVE-2005-0885.

Last major update

14-02-2024 - 01:17

Published

19-11-2005 - 01:03

Last modified

14-02-2024 - 01:17