What’s Vulnerable › Vulnerabilities

CVE-2005-2574

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-08-16 · updated 2026-06-16

Description

xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as _SERVER[REMOTE_ADDR].

Affected products

• Xmb Forum Xmb: 1.9.1

References

• http://forums.xmbforum.com/viewthread.php?tid=754523
• http://marc.info/?l=bugtraq&m=112361545228809&w=2
• https://docs.xmbforum2.com/index.php?title=Security_Issue_History
• http://forums.xmbforum.com/viewthread.php?tid=754523
• http://marc.info/?l=bugtraq&m=112361545228809&w=2
• https://docs.xmbforum2.com/index.php?title=Security_Issue_History

Get alerted when CVE-2005-2574 or the next vulnerability affects your stack