Unrated severityNVD Advisory· Published Feb 23, 2004· Updated Jun 16, 2026

CVE-2004-0322

Description

Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover event in an align tag when bbcode is allowed, or (5) img tag where bbcode is allowed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

XMB Forum/Xmb3 versions
cpe:2.3:a:xmb_forum:xmb:1.8:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:xmb_forum:xmb:1.8:*:*:*:*:*:*:*
- cpe:2.3:a:xmb_forum:xmb:1.8_sp1:*:*:*:*:*:*:*
- cpe:2.3:a:xmb_forum:xmb:1.8_sp2:*:*:*:*:*:*:*
XMB/XMBllm-create
Range: = 1.8 Final SP2

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/9726nvdExploitPatchVendor Advisory
archives.neohapsis.com/archives/bugtraq/2004-02/0645.htmlnvd
marc.infonvd
www.xmbforum.com/community/boards/viewthread.phpnvd
docs.xmbforum2.com/index.phpnvd
exchange.xforce.ibmcloud.com/vulnerabilities/15292nvd
exchange.xforce.ibmcloud.com/vulnerabilities/15294nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000