vBulletin Bulletin Board derivatives contain a security bug that may lead to disclosure of private information via cross site scripting attacks. This vulnerability may also enable an attacker to transmit sensitive information such as encrypted passwords, user identification numbers, or forum passwords to another server.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32535/vBulletinBBS.txt
Source: https://packetstormsecurity.com/files/32535/vBulletinBBS.txt.html