vBulletin "template" PHP Code Injection Vulnerabil

[Mobo]

a vulnerability in vBulletin, which potentially can be exploited by malicious users to compromise a vulnerable system.

Nested input passed to the "template" parameter in "misc.php" isn't properly verified and can be exploited to inject and execute arbitrary PHP code.

Example:
http://[victim]/misc.php?do=page&template={${[code]}}

Successful exploitation requires that the "Add Template Name in HTML Comments" option is enabled (not enabled by default and not recommended by vendor on production systems).

The vulnerability has been reported in version 3.0.6 and prior.

Solution:
Disable the "Add Template Name in HTML Comments" option.

Update to version 3.0.7.
http://www.vbulletin.com/download.php