PT-2002-1585 · Postboard · Postboard

Published 2002-06-11 · Updated 2017-07-11 · CVE-2002-0535

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PostBoard versions 2.0.1 and earlier

Description The issue allows remote attackers to execute script as other users. This can be achieved via an [IMG] tag when BBCode is enabled, or in a topic title.

Recommendations For PostBoard versions 2.0.1 and earlier, update to a version later than 2.0.1 to resolve the issue. As a temporary workaround, consider disabling BBCode or restricting the use of [IMG] tags and topic titles to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-0535

Affected Products

Postboard

References · 8

• 🔥 https://exploit-db.com/exploits/21403 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/267936 · Exploit
• 🔥 http://securityfocus.com/bid/4559 · Exploit
• 🔥 https://exploit-db.com/exploits/21401 · Exploit
• http://iss.net/security_center/static/8881.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0535 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8884 · Note
• http://securityfocus.com/bid/4561 · Note