Open Bulletin Board versions 1.0.6 and below suffer from cross site scripting, SQL injection, and arbitrary command execution flaws.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33180/openbb106.txt
Source: https://packetstormsecurity.com/files/33180/openbb106.txt.html