AntiBoard 0.6/0.7 - 'antiboard.php?feedback' Cross-Site Scripting



EKU-ID: 29744 CVE: CVE-2004-2063;OSVDB-8269 OSVDB-ID:
Author: Josh Gilmour Published: 2004-07-28 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


source: https://www.securityfocus.com/bid/10821/info

Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability.

AntiBoard versions 0.7.2 and prior are affected by these issues.

/antiboard.php?thread_id=1&mode=threaded&range=&feedback=<script>alert(document.cookie);</script>