Secunia

Some vulnerabilities have been reported in Project EROS bbsengine, one has an unknown impact, the others can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks.

1) Input passed in certain parameters is not properly sanitised in "preparestring()" before being returned to the user. This can potentially be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) An error within the handling of remote images using the [img] tag may be exploited with an unknown impact.

3) Input passed to certain parameters in php/comment.php and php/aolbonics.php isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Solution
Update to version 20060622-0315.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.zoidtechnologies.com/projects/bbsengine/ChangeLog

Deep Links
Links available in Customer Area