JVN#09223079: imgboard vulnerable to cross-site scripting

imgboard provided by imgboard.com CGI Download Center (formerly 1998 t-club CGI Download Center) is a bulletin board software that supports posting picture files. imgboard contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• From imageboard v0.9 (released on July 15, 1998) to versions prior to 1.22R6.1 u (released on December 20, 2011)
• Versions prior to imgboard 2010u (released on December 20, 2011)