CVE-2005-2574

Published: Aug 16, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as _SERVER[REMOTE_ADDR].

Affected (1)

Products: Xmb Forum: Xmb

Xmb Forum

1 product

Xmb

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xmb Forum Xmb	Version 1.9.1

References (6)

http://forums.xmbforum.com/viewthread.php?tid=754523

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112361545228809&w=2

Source: cve@mitre.org

https://docs.xmbforum2.com/index.php?title=Security_Issue_History

Source: cve@mitre.org

http://forums.xmbforum.com/viewthread.php?tid=754523

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=112361545228809&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.xmbforum2.com/index.php?title=Security_Issue_History

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.