Exploit Title: VBD Drupal Cross Site Scripting# Date: 6.01.2012 – Author: Sony.org/Website: http://st2tea.blogspot.com/2012/01/vbdrupal-cross-site-scripting.html. The exploit is based on Vbulletin 3.6.4 with VBDrupal.4. We can see xss in the /vaispy.php?do=;.replace xml withphp;. replace xml with php;. Replace xml with PHP;.”]
Source: http://st2tea.blogspot.com/2012/01/vbdrupal-cross-site-scripting.html