Security flaw in vBulletin forum software exploited by hackers

Two critical-severity flaws recently found in popular forum software, with one being actively used.