The Visitor Messages add-on for vBulletin version 3.7.3 suffers from cross site scripting and cross site request forgery vulnerabilities. This is a worm exploit that takes advantage of these issues.
a4bd6a31749a23236f15aac1e67d2032phpFoX could allow a malicious person to log in as any user by editing their cookie.
03bb9735c4b2d18d60f219d1f501b3c0