vBulletin Visitor Messages Addon Comment Notification HTML Injection Vulnerability

Bugtraq ID:	32387
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 20 2008 12:00AM
Updated:	Mar 03 2009 05:06PM
Credit:	Mx
Vulnerable:	VBulletin VBulletin 3.7.3
Not Vulnerable:	VBulletin VBulletin 3.7.4 PL1

vBulletin Visitor Messages Addon Comment Notification HTML Injection Vulnerability

vBulletin is prone to a HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

vBulletin 3.7.3 is vulnerable; other versions may also be affected.

vBulletin Visitor Messages Addon Comment Notification HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example exploit is available:

• /data/vulnerabilities/exploits/32387.js

vBulletin Visitor Messages Addon Comment Notification HTML Injection Vulnerability

Solution:
The vendor has released a patch. Please see the references for more information.

vBulletin Visitor Messages Addon Comment Notification HTML Injection Vulnerability

References:

• vBulletin 3.7.4 PL1 Released (VBulletin)
  
• vBulletin Homepage (vBulletin)