Test ID:	1.3.6.1.4.1.25623.1.0.56892
Category:	CGI abuses : XSS
Title:	VBulletin Profile.PHP Cross-Site Scripting
Summary:	NOSUMMARY
Description:	Description: The remote version of vBulletin, according to its version number, is vulnerable to an input validation vulnerability in 'profile.php' that can be used to perform cross-site scripting attacks. Versions up to 3.5.1 are vulnerable. Solution : Upgrade to 3.5.2 or later. http://www.vbulletin.com/ Risk factor : Medium CVSS Score: 4.3
Cross-Ref:	BugTraq ID: 16128 Common Vulnerability Exposure (CVE) ID: CVE-2005-4621 http://www.securityfocus.com/bid/16128 http://pridels0.blogspot.com/2005/11/vbulletin-351-xss-vuln.html http://www.vbulletin.com/forum/showthread.php?t=166391 http://www.osvdb.org/21373
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.