New vBulletin XSS Flaw Fix: vBulletin 3.7.1 PL2 and 3.6.10 PL2
Posted on June 18th, 2008 by Gabriel HarperJelsoft just announced a new patch level release for vBulletin 3.7.1 and 3.6.10. vBulletin 3.7.1 PL2 and 3.6.10 PL2 are intended to address the deeper issues behind the XSS flaw first noted in vBulletin 3.7.1 PL1 and 3.6.10 PL1. According to the Jelsoft release annoucement 3.7.1 PL2 and 3.6.10 PL2 fixes an XSS flaw affecting the URL redirection system in vBulletin.
This XSS flaw in the vBulletinURL redirection system can trick an admin or moderator into performing unintended unauthorized actions. Thanks to Jessica Hope who helped discover and identify the flaw and is noted in the release! Read the official vBulletin announcement here.
The Ultimate SEO Scripts
