==================== Discovered by: Qex Date: 26 April 2006 ==================== Open Bulletin Board 1.0.6:- /board.php?FID=[XSS] /board.php?FID=[SQL] Open Bulletin Board 1.0.8:- /read.php?TID=[XSS] /read.php?TID=[SQL]