Insufficient sanitization of URL parameters allowed for phishing attacks by redirecting users to arbitrary sites. 3. The Hidden Payload of Nulled Distributions
If you're looking for a free alternative to vBulletin, consider open-source forum software like phpBB, XenForo, or Discourse. These options may not offer the exact same features as vBulletin, but they are legitimate, free, and community-driven.
Version 4.2.0 and its immediate successors contain critical security flaws that have been extensively documented: SQL Injection (CVE-2016-6195): Affects the forumrunner