info
discussion
exploit
solution
references
MyBB UserCP2.PHP Referer Header HTML Injection Vulnerability
An exploit is not required.
Privacy Statement
Copyright 2010, SecurityFocus