Xmb Forum: >> Xmb >> 1.9.3 Security Vulnerabilities
post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action.
CVSS Score
5.0
EPSS Score
0.01
Published
2005-11-19
Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
CVSS Score
4.3
EPSS Score
0.011
Published
2005-11-16