vBulletin version 4.2.5 with Member Map version 1.1.2 suffers from an open redirection vulnerability.