CVE-2004-1864

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-03-26 · updated 2026-06-16

Description

SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php.

Affected products

Xmb Forum Xmb: 1.8_sp3, 1.9_beta

References

http://marc.info/?l=bugtraq&m=108032355905265&w=2
http://securitytracker.com/id?1009561
http://www.osvdb.org/16886
http://www.securityfocus.com/bid/9983
https://docs.xmbforum2.com/index.php?title=Security_Issue_History
https://exchange.xforce.ibmcloud.com/vulnerabilities/15655
http://marc.info/?l=bugtraq&m=108032355905265&w=2
http://securitytracker.com/id?1009561
http://www.osvdb.org/16886
http://www.securityfocus.com/bid/9983
https://docs.xmbforum2.com/index.php?title=Security_Issue_History
https://exchange.xforce.ibmcloud.com/vulnerabilities/15655

Get alerted when CVE-2004-1864 or the next vulnerability affects your stack