========================================== vBulletin <= 3.8.4 XSS Vulnerability ========================================== ############# #Title: vBulletin <= 3.8.4 #Vendor: http://vbulletin.org #Dork: "powered by vbulletin" ############# #AUTHOR: ITSecTeam #Email: Bug@ITSecTeam.com #Website: http://www.itsecteam.com #Forum : http://forum.ITSecTeam.com #Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability34.htm #Thanks: Pejvak,M3hr@n.s,Sr3dm0v3,am!rkh@n ############# POC : ############# First Page Manager, then enter're part of the Styles & Templates Download /Upload Styls then Import Style XML File format, we upload your desired area code Title for Uploaded Style xss injection we own. #############