CVE-2002-0316 Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag.
HighCVSS 7.5
EPSS 8.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xmb software xmb forum | = 1.6_pre-beta | No fix listed |
References
- 20020222 XMB cross-scripting vulnerability mailing-list
- xmb-php-css(8262) vdb-entry
- 4167 exploit patch vdb-entry vendor-advisory
- docs.xmbforum2.com