JelSoft VBulletin MemberList.PHP Cross-Site Scripting Vulnerability

No exploit is required to leverage this issue. The following proof of concept has been provided:

http://www.example.com/memberlist.php?action=getall&what=[XSS]&ltr=&perpage=25&orderby=username


 

Privacy Statement
Copyright 2010, SecurityFocus