PBBoard ‘answer’ Field HTML Injection Vulnerability


PBBoard is prone to an HTML-injection vulnerability because it fails to sanitize user-supplied input.


The original article can be found at: http://www.securityfocus.com/bid/ 54471


Vulnerable Systems:
 * PBBoard ‘answer’ Field HTML Injection Vulnerability

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.
PBBoard 2.1.4 is vulnerable; other versions may also be affected.

Vendor Status:
Currently we are not aware of any vendor-supplied patches

Disclosure Timeline:
Initial Release:Jul 16 2012

Categories: News