9 lines
No EOL
469 B
Text
9 lines
No EOL
469 B
Text
source: https://www.securityfocus.com/bid/4561/info
|
|
|
|
PostBoard is a freely available, open source message board module for the PostNuke content management system. It is designed for use on the Unix and Linux operating systems.
|
|
|
|
PostBoard does not adequately sanitize input by board users. Because of this, it is possible for users of the board to insert script code in message titles.
|
|
|
|
The following code is proof of concept:
|
|
|
|
<script>alert('give me cookies');</script> |