Security Corporation Security Advisory [SCSA-021]: vBPortal versions 2.0 alpha 8.1 and below allow a remote attacker the ability to send mail anonymously via a vulnerability in its friend.php script.
c4d06783f91cb24e63610106d750abfba594dd5975bdd6cc9027faca6c37e247