Description
Cross-site scripting (XSS) vulnerability in Things BBS before 2.0.3 and BBS Thread before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- bbs-bbsthread-unspecified-xss(65852) vdb-entry
- 43524 third-party-advisory
- http://www.thingslabo.com/cgi/bbs_thread/download.html
- JVNDB-2011-000015 third-party-advisory
- JVN#20982938 third-party-advisory
- 46638 vdb-entry
- http://www.thingslabo.com/cgi/bbs/download.html