JVN#53591199 Cross-site scripting vulnerability in multiple phpspot products

Multiple products (BBS Software etc.) provided by phpspot contain a cross-site scripting vulnerablility.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Update the software
Update to latest version according to the information provided by developer.

Products Affected

• PHP BBS
• PHP Image Capture BBS
• PHP&CSS BBS
• PHP BBS CE
• PHP_RSS_Builder
• webshot

Note that versions of the above products containing a php file in the parent directory timestamped on or after September 14, 2009 are not affected by this vulnerability.