VBulletin Misc.PHP Arbitrary PHP Script Code Execution Vulnerability

VBulletin Misc.PHP Arbitrary PHP Script Code Execution Vulnerability

vBulletin is reported prone to an arbitrary PHP script code execution vulnerability. The issue is reported to exist due to a lack of sufficient input sanitization performed on user-supplied data before this data is included in a dynamically generated script.

This vulnerability is reported to affect vBulletin board versions up to and including 3.0.6 that are configured with 'Add Template Name in HTML Comments' functionality enabled.