> OpenBB is free php-based forum. > > Exploit: > [img]javasCript:alert('Hello world.')[/img] > > Vulnerable systems: > All versions of Open Bulletin Board including > v.1.0.0 > > Immune systems: > None > > Solution: > All url's in [img] tags should start > with "http://" > > Yurij Rumiantsev Ikonboard version 3.0.1 is vulnerable for the same bug -- godminus