Hi!
Another php - board named ReBB
(http://www.rebb.net) has a [img] vulnerability.
Exploit:
Use this string (my favorite :)) -
[img]javascript:alert('test')[/img]
Possible decision:
All urls in [img] tag should start with http://
SliderGod
