Xmb Software Xmb Forum — known CVE vulnerabilities

Every CVE whose affected-product data names Xmb Software Xmb Forum, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2002-0316 — CVSS 7.5 (high): Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB…
• CVE-2006-3994 — CVSS 7.5 (high): SQL injection vulnerability in the u2u_send_recp function in u2u.inc.php in XMB (aka extreme message board) 1.9.6 Alpha and earlier allows…
• CVE-2004-2588 — CVSS 5.0 (medium): Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain…
• CVE-2006-0365 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in XMB (aka extreme message board) allows remote attackers to inject arbitrary web script or HTML…
• CVE-2006-1748 — CVSS 2.6 (low): Cross-site scripting (XSS) vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a…