CVE-2011-5251: Improper Input Validation

Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action...

PT-2012-2223

Name of the Vulnerable Software and Affected Versions vBulletin versions 4.1.3 and earlier Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved via the url parameter in a "lostpw" action in the "forum/login.php"...