Security Advisory
CVE-2005-0511
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.