cbcvebase.
CVE-2005-2574
published 2005-08-16

CVE-2005-2574: xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as…

PriorityP424medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
2.08%
79.2th percentile
xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as _SERVER[REMOTE_ADDR].

Affected

1 ranges
VendorProductVersion rangeFixed in
xmb_forumxmb——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.