[chessh]

The Chatbox Archieve (misc.php?do=ccarc) is XSS vulnerable. Here are the lines you have to edit:

Line 485 must be like this: $cybcb_search_value = htmlspecialchars($vbphrase['cybcb_search_chatbox']);

Line 487 must be like this: $cybcb_targettext = htmlspecialchars($vbulletin->GPC['cbt']);

Line 491 must be like this: $cybcb_search_value = htmlspecialchars($cybcb_targettext);

Maybe in the next version, you guys will include this fix.

Discovered and fixed by chessh, cigraphics and black_death from Click4Trick.com