OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: skizzikimail.ru
Date: Mon Feb 25 2002 - 11:13:18 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

       OpenBB is free php-based forum.

       Exploit:
       [img]javasCript:alert('Hello world.')[/img]

       Vulnerable systems:
       All versions of Open Bulletin Board including
    v.1.0.0

       Immune systems:
       None

       Solution:
       All url's in [img] tags should start
    with "http://"

                                         Yurij Rumiantsev