Vbulletin - Two-Step External Link XSS

Vendor: vBulletin Affected versions: 3.7.x - 3.8.x Mod: Two-Step External Link URL: http://www.vbulletin.org/forum/showthread.php?t=217708 Vulnerability type: XSS Risk rating: Medium Exploit http://FORUM/externalredirect.php?url=XSS Bug File: externalredirect.php line 35 Code: $url =...

vBulletin Two-Step External Link Module - externalredirect.php Cross-Site Scripting

vBulletin Two-Step External Link Module - externalredirect.php Cross-Site Scripting source: https://www.securityfocus.com/bid/39597/info Two-Step External Link module for vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied...