Description
Cross-site scripting (XSS) vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag.
References
- 20060308 [eVuln] EKINboard 'img' BBCode XSS & Cookie 'username' SQL Injection Vulnerabilities mailing-list
- 558 third-party-advisory
- ADV-2006-0758 vdb-entry
- http://evuln.com/vulns/88/summary.html
- http://www.ekinboard.com/forums/v1/viewtopic.php?id=469
- 16861 vdb-entry
- 19045 third-party-advisory
- 23546 vdb-entry
- http://www.ekinboard.com/patch_for_1.0.3.txt
- ekinboard-bbcode-xss(24921) vdb-entry