JVN#18616622 Multiple Tor World CGI scripts vulnerable to arbitrary script execution

Tor World provides CGI scripts for implementing search engines, message boards, and other tools. Multiple Tor World CGI scripts contain a vulnerability which may allow an attacker to inject an arbitrary script into the web page which is generated by the affected product.

This vulnerability is different from JVN#54593414.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Update the Software
Apply the latest updates provided by the vendor.

Products Affected

• Simple BBS Ver1.86 and earlier
• Interactive BBS Ver1.57 and earlier
• Topics BBS Ver1.11 and earlier
• Tor Board Ver1.3 and earlier