vBulletin 3.0.14 ~ init.php~ registerring global arbitary variable~ XSS exploit
Posted by imei on July 24th, 2006——–Summary——–
Software: vBulletin
Sowtware’s Web Site: http://www.vBulletin.com
Versions: 3.0.14
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: Mediume
——-Description——-
There is a security bug in most powerfull & common forum software vBulletin version 3.0.14 that allows attacker performe a XSS attack without any limitation.
Bug is in result of a series of mistakes in Kernel coding and peripheral files that can cause to […]