CVE-2005-3688

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-19 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page.

Affected products

Xmb Forum Xmb: through 1.9.3; 1.8_sp1, 1.8_sp2, 1.8_sp3, 1.9.1, 1.9.2, 1.9_beta

References

http://irannetjob.com/content/view/163/28/
http://secunia.com/advisories/17642
http://securitytracker.com/id?1015237
http://www.securityfocus.com/archive/1/417078/30/0/threaded
http://www.securityfocus.com/bid/15489
http://www.vupen.com/english/advisories/2005/2488
https://docs.xmbforum2.com/index.php?title=Security_Issue_History
http://irannetjob.com/content/view/163/28/
http://secunia.com/advisories/17642
http://securitytracker.com/id?1015237
http://www.securityfocus.com/archive/1/417078/30/0/threaded
http://www.securityfocus.com/bid/15489

Get alerted when CVE-2005-3688 or the next vulnerability affects your stack