CVE-2003-0483 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 3.9% (pctl 90)
Patch early
A public exploit exists.
Description
Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 3.92% — more likely to be exploited than 90% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2003-08-07 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| xmb forum | xmb |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | XMB Forum 1.8 - 'buddy.php?action' Cross-Site Scripting | 2003-06-23 |
References
→ the Explorer · watch your stack · NVD