JVN#01115659 REP-BBS from MT312 vulnerable to cross-site scripting

REP-BBS from MT312, is a web log system that supports posting and viewing web logs from a mobile phone. REP-BBS contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Update the software
Update the software to the latest version at MT312 (repbbs.lzh)

Products Affected

• REP-BBS
  Note that versions of REP-BBS (repbbs.lzh) that contain “model.php” and “config.php” with a timestamp prior to May 21, 2009 are vulnerable.