Description
Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits.
References
- 20020322 memberlist.php of vBulletin mailing-list
- 4349 vdb-entry
- 20020322 RE: memberlist.php of vBulletin mailing-list
- vbulletin-memberlist-execute-code(8619) vdb-entry