CVE-2002-0330

This exploit demonstrates a stored XSS vulnerability in OpenBB by injecting arbitrary JavaScript code via the [img] tag. The PoC shows how an attacker can execute script code in the context of the vulnerable website, potentially stealing cookie-based authentication credentials.

The document describes a cross-site scripting (XSS) vulnerability in OpenBB forum software due to inadequate HTML tag replacement within BBCodes. It provides a proof-of-concept payload demonstrating how arbitrary HTML/JS can be injected via malformed BBCodes.