CVE-2002-0535

PostBoard <= 2.0.1 - Cross-Site Scripting via IMG Tag or Topic Title

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2002-0535. PoCs published by gcsb.

AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in PostBoard for PostNuke, where unsanitized input in message titles allows arbitrary script execution. The PoC is a simple JavaScript alert, proving the lack of input validation.

Description

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.

Exploits (2)

exploitdb WORKING POC VERIFIED
by gcsb · textwebappsphp
https://www.exploit-db.com/exploits/21403

This exploit demonstrates a stored XSS vulnerability in PostBoard for PostNuke, where unsanitized input in message titles allows arbitrary script execution. The PoC is a simple JavaScript alert, proving the lack of input validation.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: PostBoard for PostNuke (version not specified)
No auth needed
Prerequisites: Access to PostBoard message creation functionality
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by gcsb · textwebappsphp
https://www.exploit-db.com/exploits/21401

This exploit demonstrates a stored XSS vulnerability in PostBoard for PostNuke by injecting JavaScript code within IMG tags. The lack of input sanitization allows arbitrary script execution when the post is viewed.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: PostBoard for PostNuke (version not specified)
No auth needed
Prerequisites: Access to submit a post on a vulnerable PostBoard instance
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/8884
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4561
Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/8881.php
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4559
Exploit, Patch, Vendor Advisory mailing-list x_refsource_bugtraq
http://online.securityfocus.com/archive/1/267936

Scores

EPSS 0.0736
EPSS Percentile 93.8%

Details

Status published
Products (6)
postboard/postboard 2.0
postboard/postboard 2.0.1
postnuke_software_foundation/postnuke 0.64
postnuke_software_foundation/postnuke 0.70
postnuke_software_foundation/postnuke 0.71
postnuke_software_foundation/postnuke 0.703
Published Jul 03, 2002
Tracked Since Feb 18, 2026