Unrated severityNVD Advisory· Published Mar 26, 2004· Updated Apr 16, 2026

CVE-2004-1862

Description

Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) xmbuser parameter to xmb.php, (2) folder parameter to u2u.php, (3) viewmost, replymost, or latest parameter to stats.php, (4) message or icons parameter to post.php, (5) threadlist, pagelinks, forumlist, navigation, or (6) forumdisplay parameter to forumdisplay.php.

Affected products

Xmb Forum/Xmb2 versions
cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*
- cpe:2.3:a:xmb_forum:xmb:1.9_beta:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/9983nvdVendor Advisory
marc.infonvd
osvdb.org/14983nvd
osvdb.org/14985nvd
osvdb.org/14986nvd
osvdb.org/14987nvd
osvdb.org/14988nvd
secunia.com/advisories/11230nvd
docs.xmbforum2.com/index.phpnvd
exchange.xforce.ibmcloud.com/vulnerabilities/15654nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000