| Package | Affected versions | Patched versions |
|---|---|---|
| vbulletin | = 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.1= 4.1.1= 4.1.2≤ 4.1.3 |
Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free