something interesting over
Code:
http://www.go4expert.com/showthread.php?t=17905
there might be others. My friend who has free time whole day scanned vBulletin and said its crap and says he has found 0day. In another hacking forum, a hacker posted many database dumps of vbulletin powered sites (yeah of course >3.7.3) so it means its vulnerable. I would be glad to help you but my schedules are so tight that I can't have time for going on through lines of vBulletin scripts.