CVE-2004-0322

Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member…

published March 18, 2004

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover event in an align tag when bbcode is allowed, or (5) img tag where bbcode is allowed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04836 · 91.9th percentile
Published
2004-03-18T05:00Z
EPSS history
Timeline
  • 18 MAR 05:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member…
    cvelistv5