Secunia

A vulnerability has been reported in vBulletin, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the "redirect" parameter to admincp/index.php in the admin control panel (ACP) is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

NOTE: Reportedly, this can be exploited to inject and execute arbitrary PHP code on an affected system, but requires that the administrator is logged in or logs in e.g. when following a specially crafted link.

The vulnerability is reported in version 3.7.1 and 3.6.10. Other versions may also be affected.

Solution
Update to version 3.7.1 PL1 or 3.6.10 PL1.

Provided and/or discovered by
Reported by the vendor. Additional information provided by Jessica Hope.

Changelog
Further details available in Customer Area

Original Advisory
http://www.vbulletin.com/forum/showthread.php?t=274882

Jessica Hope:
http://seclists.org/fulldisclosure/2008/Jun/0181.html

Deep Links
Links available in Customer Area