CVE-2004-1967 Information

Description

Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php (2) cp_usergroup.php (3) cp_ipbans.php (4) myhome.php (5) post.php or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link.

Reference

http://marc.info/?l=bugtraq&m=108301983206107&w=2 http://secunia.com/advisories/11481 http://securitytracker.com/id?1009935 https://exchange.xforce.ibmcloud.com/vulnerabilities/15967