Vulnerability Details : CVE-2004-1864
SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php.
Vulnerability category: Sql Injection
Products affected by CVE-2004-1864
- cpe:2.3:a:xmb_forum:xmb:1.9_beta:*:*:*:*:*:*:*
- cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-1864
1.24%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 77 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-1864
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
Vendor statements for CVE-2004-1864
-
XMB 2021-04-23XMB versions 1.9.8 SP2 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/
References for CVE-2004-1864
-
http://www.securityfocus.com/bid/9983
Vendor Advisory
-
http://marc.info/?l=bugtraq&m=108032355905265&w=2
'[waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8' - MARC
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/15655
XMB multiple scripts SQL injection CVE-2004-1864 Vulnerability Report
-
http://www.osvdb.org/16886
-
http://securitytracker.com/id?1009561
-
https://docs.xmbforum2.com/index.php?title=Security_Issue_History
Security Issue History - XMBdocs
Jump to