Approved changes feed: RSS · Atom

cpe:2.3:a:xmb_forum:xmb:1.9.2:*:*:*:*:*:*:*

part: a version: 1.9.2 update: *

VendorXmb Forum (c1ad31f0-c529-58c1-a29d-7f3ca6c56181)
ProductXmb (3a55a803-69e5-5340-aaab-eeef6b9b36e0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mattbernst/xmbforum purl2cpe 2026-06-01 10:13:13.093129

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3689 vulnerable 2026-06-08 04:48:41.826581 Details available
post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action.
Published: 2005-11-19T01:00:00.000Z
Updated: 2024-08-07T23:17:23.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3688 vulnerable 2026-06-08 04:48:41.825556 Details available
Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page.
Published: 2005-11-19T01:00:00.000Z
Updated: 2024-08-07T23:17:23.605Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.