vBulletin 4.2.0 EXPLOIT

============================================================================================================
* vBulletin 4.2.0 EXPLOIT
* VULNERABILITY: XXS
* PATCHED BY VB BUT LOTS OF SITES ARE STILL VULN.
* SHARED BY MR.407
* GOOGLE DORK: "Powered by vBulletin® Version 4.2.0"
* VISIT XBLOUNGE.COM/FORUMS
============================================================================================================

1. Search the google dork or just go to your victims site (has to be on VB 4.2.0)

2. Create an account

3. Go to the calendar section

4. Create an event

5. In the title Inject your XXS code

6. Then you can spread your link throughout the forum

#r.o0t
 I CAME | I SAW | I CONQUERED