CVE-2005-2574

N/A

Description

xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as _SERVER[REMOTE_ADDR].

CVE Details

CVSS v3.1 ScoreN/A

Published8/16/2005

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

xmb_forum:xmb

References

http://forums.xmbforum.com/viewthread.php?tid=754523(cve@mitre.org)

http://marc.info/?l=bugtraq&m=112361545228809&w=2(cve@mitre.org)

https://docs.xmbforum2.com/index.php?title=Security_Issue_History(cve@mitre.org)

http://forums.xmbforum.com/viewthread.php?tid=754523(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=bugtraq&m=112361545228809&w=2(af854a3a-2127-422b-91ae-364da2661108)

https://docs.xmbforum2.com/index.php?title=Security_Issue_History(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.