#1  
10-08-2009, 02:33 PM
Jordan     Male
SMS ~ [ + ]





..



Indianred
  : 2
  : Aug 2009
  : 3347
  : 11-04-2017 (01:14 PM)
  : 35
  : 
  : 132,274 [ + ]
  : 12030
  :   will become famous soon enough  will become famous soon enough  will become famous soon enough  will become famous soon enough  will become famous soon enough  will become famous soon enough  will become famous soon enough  will become famous soon enough  will become famous soon enough  will become famous soon enough  will become famous soon enough
[ + ]
Dars vBulletin



, , , , , , , , vbulletin ,


vBulletin   vixion_bramjnet2.gif

...............................
vBulletin   vixion4.gif

Xss 3.7.1



http://www.vbulletin.com

Xss 3.7.1 3.6.10



3.7.1

3.7.1

functions.php version_vbulletin.php

includes
index.php admincp




:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+



index.php admincp



PHP:

$redirect = htmlspecialchars_uni



(fetch_replaced_session_url($vbulletin->GPC['redirect']));







$redirect = htmlspecialchars_uni



(fetch_replaced_session_url($vbulletin->GPC['redirect']));



$redirect = create_full_url($redirect);


$redirect = preg_replace(


array('/&#0*59;?/', '/&#x0*3B;?/i', '#;#'),


'%3B',


$redirect


);


$redirect = preg_replace('#&amp%3B#i', '&',



$redirect);



index.php admincp




$mainframe = "<frame src=\"" . iif(!empty($vbulletin-



>GPC['loc']) AND !preg_match('#^[a-z]+:#i', $vbulletin->GPC




['loc']), $vbulletin->GPC['loc'], "index.php?" . $vbulletin-



>session->vars['sessionurl'] . "do=home") . "\" name=\"main\"



scrolling=\"yes\" frameborder=\"0\" marginwidth=\"10\"



marginheight=\"10\" border=\"no\" />\n";






$mainframe = "<frame src=\"" . iif(!empty($vbulletin-



>GPC['loc']) AND !preg_match('#^[a-z]+:#i', $vbulletin->GPC




['loc']), create_full_url($vbulletin->GPC['loc']),



"index.php?" . $vbulletin->session->vars['sessionurl'] .



"do=home") . "\" name=\"main\" scrolling=\"yes\"



frameborder=\"0\" marginwidth=\"10\" marginheight=\"10\"



border=\"no\" />\n";






:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+



functions.php includes




if (!preg_match('#^[a-z]+://#i', $url))






if (!preg_match('#^[a-z]+(?<!



about|java******|vb******|data)://#i', $url))





functions.php includes






{


$modcache




["$userid"]["$do"] = 1;


break;


}


}


else


{


$modcache["$userid"]



["$do"] = 1;


break;


}






{


$modcache




["$userid"]["$do"] = 1;


}


}


else


{


$modcache["$userid"]



["$do"] = 1;


}





:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+



version_vbulletin.php includes






define('FILE_VERSION_VBULLETIN', '');






define('FILE_VERSION_VBULLETIN', '3.7.1 Patch Level 1');




,,,


vBulletin   vixion4.gif

] 3000





3000



vBulletin   boot.JPG

:

1-

vBulletin   111.JPG

vBulletin   222.JPG

2-

vBulletin   33_33.JPG


3-

vBulletin   444.JPG

4- | |

vBulletin   555.JPG




vBulletin   vixion4.gif

[ ] config.php vB 3.6.x



config.php

:
:
: config editor




http://downloads.zend.com/studio/5.2...udio-5_2_0.exe

http://www.arbshare.com/8525047

vBulletin   quot-top-left.gifvBulletin   quot-top-right.gifvBulletin   quot-top-right-10.gi4555 x
2 YSW][email protected])txlT T#0QFP%b^XjGPAbĪ-u*3
UT`ThEQP(E
@ٍOdoϹ_?UH\xШAbk$ď #J˴Z'uëyƽRmmFU| ]uchw*eI۟=S=i6|CYe_9R
~ba2?vEdq+[efMb{Dn8<wWU9.}ǻm*< !iؔ
wnڒeKeAc\]MO{{^mӥu^"?06-(SuZ}ߒgӱIu(şWW/s~?;gݎʧ] 7hNPsx}A[l˘w*6t1Ǖ3mOtaH+>Mg7 ׄ8Z5?hy6*mp;Na%3<>w0d=/r]i7
lbH#C}ʅZߞ;m)8(5#-gfЉ'G7{=1ŷί{>:^;뾻
BCcUt4k}V!́2,*4T꓿ߺ9Ω9 XQ 8~W~g]2Z4zE|.kw ItnV䥊rwY:S&IZnS/l_F#EuM5gF*~e5 q;DB4A--+_\?_[Z/ʼn7quĖSNB<^3rĺC;:gܐ2 *oYst}@c]ԦVvɿhe2J~׺o(^y-[Qܲ
Xra *'Lݓ7nI}V,b,t&g\ d8 CD'E$5q‡S<X @! 㾛4߸ F[}gd
Aj oHS rϸe%Ibd%lGcBU[email protected]XK~nA

T*Ĉ #@Ӄ/'ѢFiLL~L3
蚈Aށ~PR-Fc'g"XhZP\\x5FI I.C$S"&(5Zf1;B*)Rl:bp!k1!\e4C ʷT m19
hj #!0)f9\`)/ר@r]Jk k3\J
.2$ $[email protected]Urq陕Ę@4Y7ԳjJAJ' R
0_s\*'D: ZfF:`<+ؐӈqK 1X%ԟ4 H*Gɣ$8jxL{L*#X\
IB}MJ Cqq*<&InBpfLU64Azq#Rbp ]1
#&#$ M6%2ބ!%gBL*rv
SUj}ʞft=L,?2a \a3a:Ҭ\H*2m~,;:Y`*
NE4Z5U~gҳ`
s!!bF`RLp ֏ۃ3' px|>S[email protected]N_ vBulletin   quot-bot-left.gifvBulletin   quot-bot-right.gif






:





vBulletin   vixion4.gif








vBulletin   vixion4.gif
vBulletin   2hicsc5.gifvBulletin   2hicsc5.gifvBulletin   2hicsc5.gifvBulletin   2hicsc5.gifvBulletin   2hicsc5.gifvBulletin   2hicsc5.gifvBulletin   2hicsc5.gifvBulletin   2hicsc5.gifvBulletin   2hicsc5.gifvBulletin   2hicsc5.gif



Vixion

Bramjnet


vBulletin   vixion4.gif

:




 :