[andrew10]

Hi vBulletin,

I've found a way to hack vBulletin and have sent in a report to support@vbulletin.com.
I have yet to receive a response to even state that the email was received.

To put it bluntly this is the sort of attack which could be used to gain access to a forum and masquerade as the user, or worse obtain the users password and use it to hack other systems which that user uses with the same username / password combination.

It would be nice to receive an acknowledgement, whilst I won't use the hack, or tell others how to successfully exploit it, that's not to say there are not others out there who are not as trustworthy as me.

I'm not asking for any monetary compensation, all I'm asking is that the bug report is properly acknowledged and the risk is appropriately mitigated, since I myself frequent several forums powered by vBulletin.

I don't think this is too much to ask.

Andrew