Описание
Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page.
Ссылки
- ExploitURL Repurposed
- Vendor Advisory
- ExploitURL Repurposed
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.9.3 (включая)
Одно из
cpe:2.3:a:xmb_forum:xmb:*:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.8_sp1:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.8_sp2:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.9.1:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.9.2:*:*:*:*:*:*:*
cpe:2.3:a:xmb_forum:xmb:1.9_beta:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.00944
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page.
EPSS
Процентиль: 76%
0.00944
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other