Aliaksandr Hartsuyeu has discovered a vulnerability in NavBoard, which potentially can be exploited by malicious people to conduct script insertion attacks.

Input passed via certain BBcode tags (e.g. url) isn't properly sanitised before being used. This can be exploited to inject arbitrary Javascript code, which will be executed in a user's browser session in context of an affected site when a malicious link with the "JavaScript" URI handler is followed from a malicious message.

Example:
[url=javascript:[code]]title[/url]

Successful exploitation requires that the Administrator has defined some BBcode tags that can be used in forum posts. This is not defined by default in version V16.

The vulnerability has been confirmed in version V16 (2.6.0) and also reported in version V17 beta2.

Solution
Do not allow the use of BBcode tags or edit the source code to ensure that input is properly sanitised.

Provided and/or discovered by
Aliaksandr Hartsuyeu

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://evuln.com/vulns/19/summary.html

Deep Links
Links available to Secunia VIM customers