CVE-2007-3326

Multiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to redirect visitors to arbitrary local files via a .. dot dot in 1 the loc parameter to admincp/index.php and 2 the Hyperlink information URl field for post Topic in showthread.php, enabling cross-site scripti...

CVE-2007-3326

The CVE-2007-3326 entry refers to multiple directory traversal flaws in vBulletin 3.x.x that allow remote attackers to redirect visitors to arbitrary local files using a .. sequence in (1) loc to admincp/index.php and (2) the Hyperlink information URL field for showthread.php, with cross-site scr...