Secunia Advisory: SA10546 Print Advisory
Release Date: 2004-01-06

Critical: Less critical
Impact: Cross Site Scripting
Where: From remote

Software: ThWboard 2.x


Description:
theDon has reported a vulnerability in ThWboard, which can be exploited by malicious people to conduct cross-site scripting attacks.

The vulnerability is caused due to an unspecified input validation error in "board.php". This can be exploited to execute arbitrary HTML or script code in a user's browser session in context of an affected site.

Solution:
Update to Beta 2.84.
http://sourceforge.net/project/showfiles.php?group_id=40643

Provided and/or discovered by:
theDon

Source: Secunia

OS/2-eCS-ArcaOS General News

More in General  

OS/2-eCS-ArcaOS Software News

More in Software  

Latest Forum Posts

Site News

More in Site News