CVE Tools
Track your stack

Xmb-forum

15 CVEs tracked since 2003. Since Jun 2003, none of them reached CISA KEV.

Xmb-forum CVEs per month

Jun 2003 to Feb 2006. Point at a month, or focus the strip and use the arrow keys.
Xmb-forum CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2003-0620
2003-07null or fewer
2003-08null or fewer
2003-09null or fewer
2003-10null or fewer
2003-11null or fewer
2003-12null or fewer
2004-01null or fewer
2004-02null or fewer
2004-0320
2004-04null or fewer
2004-05null or fewer
2004-06null or fewer
2004-07null or fewer
2004-08null or fewer
2004-09null or fewer
2004-10null or fewer
2004-11null or fewer
2004-12null or fewer
2005-01null or fewer
2005-02null or fewer
2005-03null or fewer
2005-04null or fewer
2005-0540
2005-06null or fewer
2005-07null or fewer
2005-0820
2005-09null or fewer
2005-10null or fewer
2005-1130
2005-12null or fewer
2006-01null or fewer
2006-0220

Products

The products that kept showing up in Xmb-forum's monthly top three, with their CVEs summed over those months.

  1. Xmb156 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Xmb-forum.

  1. CVE-2007-6728Cross-site scripting (XSS) vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration.4.3
  2. CVE-2006-0778Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) $u2u_select array parameter to u2u.inc.php and (2) $val v...7.5
  3. CVE-2006-0779Cross-site scripting (XSS) vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using ...4.3
  4. CVE-2005-3689post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action.5.0
  5. CVE-2005-3688Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration...4.3
  6. CVE-2005-3544Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter.4.3
  7. CVE-2005-2575SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable.7.5
  8. CVE-2005-2574xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as _SERVER[REMOTE_ADDR].5.0
  9. CVE-2004-1860Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service (server disconnect) and possibly execute arbitrary code...5.0
  10. CVE-2004-1864SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today...7.5
  11. CVE-2004-1863Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote attackers to inject arbitrary web script or HTML via (1) the u2uheader ...4.3
  12. CVE-2004-1862Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) xmbuser parameter to...4.3
  13. CVE-2005-0885Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields.4.3
  14. CVE-2004-0323Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in viewthread.php, (2) desc parameter in mis...7.5
  15. CVE-2004-0322Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parame...4.3

The record

Peak rank
#19 in Jun 2003
Busiest month shown
May 2005, 4 CVEs
Months with a KEV entry
0 since Jun 2003
Monthly snapshots
6 since 2003
Xmb-forum's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store