A vulnerability has been reported in two Moo products, which can be exploited by malicious people to conduct cross-site scripting attacks.

Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is reported in:
* Moo moobbs versions 1.02 and prior
* Moo moobbs2 versions 1.02 and prior

Solution
Update to version 1.03.

Provided and/or discovered by
Yuji Tounai, bogus.jp reported via IPA.

Original Advisory
Moo:
http://common1.biz/cgi_bug.html

JVN:
http://jvn.jp/en/jp/JVN24423311/index.html
http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000033.html

http://jvn.jp/en/jp/JVN75101998/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2010-000034

Deep Links
Links available in Customer Area