vBulletin<<--v3.5.X "member.php" Cross Site Scripting

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: vBulletin<<--v3.5.X "member.php" Cross Site Scripting
From: CrAzY.CrAcKeR@xxxxxxxxxxx
Date: 20 Jun 2006 13:10:16 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

=============================================
Discovered By: CrAzY CrAcKeR 
Site: www.alshmokh.com 
I want to thank my friend:- 
nono225-mHOn-rageh-Lover Hacker-Breeeeh
BoNy_m-Rootshill-LiNuX_rOOt-Sw33t h4ck3r
=============================================

Example:- 
/vb/member.php?u=[XSS]

=================================== 
Email: CrAzY.CrAcKeR(at)hotmail(dot)com

Prev by Date: Multiple Bypass and Integrity Lost Vulnerabilities
Next by Date: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities
Previous by thread: Multiple Bypass and Integrity Lost Vulnerabilities
Next by thread: Re: vBulletin<<--v3.5.X "member.php" Cross Site Scripting
Index(es):
- Date
- Thread