info
discussion
exploit
solution
references
vBulletin Private Message HTML Injection Vulnerability
A proof of concept HTML exploit has been made available:
/data/vulnerabilities/exploits/vBulletin-preview-poc.html.txt
Privacy Statement
Copyright 2010, SecurityFocus