Release Date: 2004-01-06
Critical: Less critical
Impact: Cross Site Scripting
Where: From remote
Software: ThWboard 2.x
Description:
theDon has reported a vulnerability in ThWboard, which can be exploited by malicious people to conduct cross-site scripting attacks.
The vulnerability is caused due to an unspecified input validation error in "board.php". This can be exploited to execute arbitrary HTML or script code in a user's browser session in context of an affected site.
Solution:
Update to Beta 2.84.
http://sourceforge.net/project/showfiles.php?group_id=40643
Provided and/or discovered by:
theDon
Source: Secunia