This is a writeup describing SQL injection and XSS vulnerabilities in vBulletin versions 2.3.* and 2.* respectively. It provides example exploit URLs but does not include functional exploit code.
Classification
Writeup 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Theoretical
Target:vBulletin versions 2.3.* and 2.*
No auth needed
Prerequisites:Access to the target vBulletin instance