mailing list archives
From: "Nate Pinchot" <npinchot () ccservice cc>
Date: Thu, 28 Feb 2002 09:07:00 -0500
OpenBB is free php-based forum.
All versions of Open Bulletin Board including v.1.0.0
All url's in [img] tags should start with "http://"
I had actually informed them about this bug a long time ago and
they informed me they were working on a patch. This was 2 months
ago. Since you posted this to bugtraq they finally released a patch.
The patch can be found here:
For any who care about the technical details of the patch, they did
NOT filter [img] tags so that they start with http:// as suggested. They
vulnerable, and I informed them of this, they don't seem to care.