Skip to content
Noroxi

xmb software records

7 published records for vendor xmb software.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    7 records
    • CVE-2002-0316
      33Monitor

      Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB us

      HighCVSS 7.5Proof of conceptEPSS 8%

      xmb software · xmb forumJun 25, 2002

    • CVE-2006-3994
      31Monitor

      SQL injection vulnerability in the u2u_send_recp function in u2u.inc.php in XMB (aka extreme message board) 1.9.6 Alpha and earlier allows r

      HighCVSS 7.5Proof of conceptEPSS 3%

      xmb software · xmb forumAug 4, 2006

    • CVE-2006-4191
      23Monitor

      Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execu

      MediumCVSS 5.1Proof of conceptEPSS 9%

      xmb software · extreme message boardAug 16, 2006

    • CVE-2004-2588
      21Monitor

      Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain s

      MediumCVSS 5.0No exploitEPSS 3%

      xmb software · xmb forumDec 31, 2004

    • CVE-2006-0365
      18Monitor

      Cross-site scripting (XSS) vulnerability in XMB (aka extreme message board) allows remote attackers to inject arbitrary web script or HTML v

      MediumCVSS 4.3No exploitEPSS 1%

      xmb software · xmb forumJan 22, 2006

    • CVE-2007-0519
      14Monitor

      Cross-site scripting (XSS) vulnerability in memcp.php in XMB U2U Instant Messenger allows remote authenticated users to inject arbitrary web

      LowCVSS 3.5No exploitEPSS 1%

      xmb software · u2u instant messengerJan 25, 2007

    • CVE-2006-1748
      11Monitor

      Cross-site scripting (XSS) vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Fl

      LowCVSS 2.6No exploitEPSS 1%

      xmb software · xmb forumApr 12, 2006