https://www.exploit-db.com/exploits/23746
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200402-089

XMB1.8最终版SP2存在多个跨站脚本（XSS）漏洞。远程攻击者可以像其他用户样借助(1)member.php中的member参数，(2)u2uadmin.php中的uid参数，(3)editprofile.php中的user参数，(4)bbcode被允许时align标签的onmouseover事件，或者(5)bbcode被允许时img标签执行任意脚本。

source: http://www.securityfocus.com/bid/9726/info
 
XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user or to have malicious SQL queries executed in the underlying database.

http://www.example.com/xmb18sp2/editprofile.php?user=x"><%73cript>alert(document.cookie);</%73cript>

来源:XF
名称:xmb-multiple-scripts-xss(15292)
链接:http://xforce.iss.net/xforce/xfdb/15292
来源:BID
名称:9726
链接:http://www.securityfocus.com/bid/9726
来源:BUGTRAQ
名称:20040223[waraxe-2004-SA#004]-MultiplevulnerabilitiesinXMB1.8PartagiumFinalSP2
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=107756526625179&w;=2
来源:XF
名称:xmb-bbcode-execute-code(15294)
链接:http://xforce.iss.net/xforce/xfdb/15294
来源:www.xmbforum.com
链接:http://www.xmbforum.com/community/boards/viewthread.php?tid=746859
来源:BUGTRAQ
名称:20040225Re:[waraxe-2004-SA#004]-MultiplevulnerabilitiesinXMB1.8PartagiumFinalSP2
链接:http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html